info
discussion
exploit
solution
references
PHP ZipArchive::extractTo() '.zip' Files Directory Traversal Vulnerability
An attacker can exploit this issue using standard client applications.
Privacy Statement
Copyright 2010, SecurityFocus