Main
Vulnerability Database
Exploits
ID:11506 - Exploit for Input validation error in PHP - CVE-2006-1608
ID:11506 - Exploit for Input validation error in PHP - CVE-2006-1608
Published: June 9, 2025
Vulnerability identifier: #VU110488
Vulnerability risk: Low
CVE-ID: CVE-2006-1608
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to gain access to sensitive information.
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
Remediation
Install update from vendor's website.