AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-6501

MEDIUM · CVSS 4.6 EPSS 0.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-03-30 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.6. See the original NVD description below for full technical details.

CVE
CVE-2013-6501
Severity
MEDIUM
CVSS
4.6
EPSS
0.58%

Original NVD Description

The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.