Main Vulnerability Database Vulnerabilities #VU110487

Path traversal in PHP - CVE-2006-1494

Published: October 30, 2018 / Updated: June 9, 2025

Vulnerability identifier: #VU110487

CSH Severity: Low

CVSS v4: []

CVE-ID: CVE-2006-1494

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions. A remote authenticated attacker can send a specially crafted HTTP request and remote attackers to create files in arbitrary directories via the tempnam function.

Affected software

PHP

How to mitigate CVE-2006-1494

Install update from vendor's website.

PHP - addressed in versions 4.4.3, 4.10, 5.1.3

Links to Public Exploits and PoC-codes

Exploit #11507 - PHP 4.x - tempnam() Function open_basedir Restriction Bypass (June 9, 2025)

External References

Related Security Bulletins

Multiple vulnerabilities in PHP