EDB-26443

functional

PHP 4.x/5.0.x - Arbitrary File Upload GLOBAL Variable Overwrite

view exploit source exploit_dbverifiedtype remoteauthor rgodpublished 2005-10-31catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2005-3390US	high7.5	65.5% (99th)	Exploit	2005-11-01
The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass securit…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.