Vulnerability in Php
CVE-2013-6501
The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.
EPSS: 0.006 (44.2th percentile) — read the EPSS interpretation.
Affected products
- Php
- Suse Linux_enterprise_server — versions 11.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
Frequently asked questions
- What is CVE-2013-6501?
- CVE-2013-6501 is a vulnerability in Php, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). Published 2015-03-30.
- Is CVE-2013-6501 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.