Check Point Advisories

PHP POST File Upload PHP GLOBALS Variable Overwrite Security Bypass - Ver2 (CVE-2005-3390)

Check Point Reference:	CPAI-2014-0797
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2005-3390
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A security bypass vulnerability has been reported in PHP. A remote attacker could exploit this vulnerability via a multipart/form-data POST request with a "GLOBALS" fileupload field. Successful exploitation of this vulnerability could allow a remote attacker to bypass security protections of PHP applications on the affected system.