CVE-2006-4483

CVE-2006-4483 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option when open_basedir or safe_mode is enabled, which allows attackers to perform unauthorized actions, possibly related to the realpath cache.

Learn more about our Web Application Penetration Testing UK.