Vulnerability in Php

CVE-2012-0057

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.

EPSS: 0.032 (86.6th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.0.0, 5.0.1, 5.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References