CVE-2015-6833

Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to…

published January 19, 2016

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04837 · 91.9th percentile
Published
2016-01-19T02:00Z
EPSS history
Timeline
  • 19 JAN 02:00Z
    Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to…
    cvelistv5