AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-1130

MEDIUM · CVSS 5 EPSS 9.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-03-26 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.0. See the original NVD description below for full technical details.

CVE
CVE-2010-1130
Severity
MEDIUM
CVSS
5
EPSS
9.37%

Original NVD Description

session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot).