// For flags

CVE-2013-1635

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

ext/soap/soap.c en PHP anterior a v5.3.22 y v5.4.x anterior a v5.4.13 no valida la relacion entre la directiva soap.wsdl_cache_dir y la directiva open_basedir, lo que permite a atacantes remotos eludir las restricciones de acceso mediante la creación de ficheros SOAP WSDL cacheados en un directorio arbitrario.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2013-02-07 CVE Reserved
  • 2013-02-28 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-264: Permissions, Privileges, and Access Controls
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
<= 5.3.21
Search vendor "Php" for product "Php" and version " <= 5.3.21"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
1.0
Search vendor "Php" for product "Php" and version "1.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
2.0
Search vendor "Php" for product "Php" and version "2.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
2.0b10
Search vendor "Php" for product "Php" and version "2.0b10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0
Search vendor "Php" for product "Php" and version "3.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.1
Search vendor "Php" for product "Php" and version "3.0.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.2
Search vendor "Php" for product "Php" and version "3.0.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.3
Search vendor "Php" for product "Php" and version "3.0.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.4
Search vendor "Php" for product "Php" and version "3.0.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.5
Search vendor "Php" for product "Php" and version "3.0.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.6
Search vendor "Php" for product "Php" and version "3.0.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.7
Search vendor "Php" for product "Php" and version "3.0.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.8
Search vendor "Php" for product "Php" and version "3.0.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.9
Search vendor "Php" for product "Php" and version "3.0.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.10
Search vendor "Php" for product "Php" and version "3.0.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.11
Search vendor "Php" for product "Php" and version "3.0.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.12
Search vendor "Php" for product "Php" and version "3.0.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.13
Search vendor "Php" for product "Php" and version "3.0.13"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.14
Search vendor "Php" for product "Php" and version "3.0.14"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.15
Search vendor "Php" for product "Php" and version "3.0.15"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.16
Search vendor "Php" for product "Php" and version "3.0.16"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.17
Search vendor "Php" for product "Php" and version "3.0.17"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.18
Search vendor "Php" for product "Php" and version "3.0.18"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta_4_patch1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta4
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.0
Search vendor "Php" for product "Php" and version "4.0.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.1
Search vendor "Php" for product "Php" and version "4.0.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.2
Search vendor "Php" for product "Php" and version "4.0.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.3
Search vendor "Php" for product "Php" and version "4.0.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.4
Search vendor "Php" for product "Php" and version "4.0.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.5
Search vendor "Php" for product "Php" and version "4.0.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.6
Search vendor "Php" for product "Php" and version "4.0.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.7
Search vendor "Php" for product "Php" and version "4.0.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.1.0
Search vendor "Php" for product "Php" and version "4.1.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.1.1
Search vendor "Php" for product "Php" and version "4.1.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.1.2
Search vendor "Php" for product "Php" and version "4.1.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.0
Search vendor "Php" for product "Php" and version "4.2.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.1
Search vendor "Php" for product "Php" and version "4.2.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.2
Search vendor "Php" for product "Php" and version "4.2.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.3
Search vendor "Php" for product "Php" and version "4.2.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.0
Search vendor "Php" for product "Php" and version "4.3.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.1
Search vendor "Php" for product "Php" and version "4.3.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.2
Search vendor "Php" for product "Php" and version "4.3.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.3
Search vendor "Php" for product "Php" and version "4.3.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.4
Search vendor "Php" for product "Php" and version "4.3.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.5
Search vendor "Php" for product "Php" and version "4.3.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.6
Search vendor "Php" for product "Php" and version "4.3.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.7
Search vendor "Php" for product "Php" and version "4.3.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.8
Search vendor "Php" for product "Php" and version "4.3.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.9
Search vendor "Php" for product "Php" and version "4.3.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.10
Search vendor "Php" for product "Php" and version "4.3.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.11
Search vendor "Php" for product "Php" and version "4.3.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.0
Search vendor "Php" for product "Php" and version "4.4.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.1
Search vendor "Php" for product "Php" and version "4.4.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.2
Search vendor "Php" for product "Php" and version "4.4.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.3
Search vendor "Php" for product "Php" and version "4.4.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.4
Search vendor "Php" for product "Php" and version "4.4.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.5
Search vendor "Php" for product "Php" and version "4.4.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.6
Search vendor "Php" for product "Php" and version "4.4.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.7
Search vendor "Php" for product "Php" and version "4.4.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.8
Search vendor "Php" for product "Php" and version "4.4.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.9
Search vendor "Php" for product "Php" and version "4.4.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta4
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
rc2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
rc3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.1
Search vendor "Php" for product "Php" and version "5.0.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.2
Search vendor "Php" for product "Php" and version "5.0.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.3
Search vendor "Php" for product "Php" and version "5.0.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.4
Search vendor "Php" for product "Php" and version "5.0.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.5
Search vendor "Php" for product "Php" and version "5.0.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.0
Search vendor "Php" for product "Php" and version "5.1.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.1
Search vendor "Php" for product "Php" and version "5.1.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.2
Search vendor "Php" for product "Php" and version "5.1.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.3
Search vendor "Php" for product "Php" and version "5.1.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.4
Search vendor "Php" for product "Php" and version "5.1.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.5
Search vendor "Php" for product "Php" and version "5.1.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.6
Search vendor "Php" for product "Php" and version "5.1.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.0
Search vendor "Php" for product "Php" and version "5.2.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.1
Search vendor "Php" for product "Php" and version "5.2.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.2
Search vendor "Php" for product "Php" and version "5.2.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.3
Search vendor "Php" for product "Php" and version "5.2.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.4
Search vendor "Php" for product "Php" and version "5.2.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.5
Search vendor "Php" for product "Php" and version "5.2.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.6
Search vendor "Php" for product "Php" and version "5.2.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.7
Search vendor "Php" for product "Php" and version "5.2.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.8
Search vendor "Php" for product "Php" and version "5.2.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.9
Search vendor "Php" for product "Php" and version "5.2.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.10
Search vendor "Php" for product "Php" and version "5.2.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.11
Search vendor "Php" for product "Php" and version "5.2.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.12
Search vendor "Php" for product "Php" and version "5.2.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.13
Search vendor "Php" for product "Php" and version "5.2.13"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.14
Search vendor "Php" for product "Php" and version "5.2.14"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.15
Search vendor "Php" for product "Php" and version "5.2.15"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.16
Search vendor "Php" for product "Php" and version "5.2.16"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.17
Search vendor "Php" for product "Php" and version "5.2.17"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.0
Search vendor "Php" for product "Php" and version "5.3.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.1
Search vendor "Php" for product "Php" and version "5.3.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.2
Search vendor "Php" for product "Php" and version "5.3.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.3
Search vendor "Php" for product "Php" and version "5.3.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.4
Search vendor "Php" for product "Php" and version "5.3.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.5
Search vendor "Php" for product "Php" and version "5.3.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.6
Search vendor "Php" for product "Php" and version "5.3.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.7
Search vendor "Php" for product "Php" and version "5.3.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.8
Search vendor "Php" for product "Php" and version "5.3.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.9
Search vendor "Php" for product "Php" and version "5.3.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.10
Search vendor "Php" for product "Php" and version "5.3.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.11
Search vendor "Php" for product "Php" and version "5.3.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.12
Search vendor "Php" for product "Php" and version "5.3.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.13
Search vendor "Php" for product "Php" and version "5.3.13"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.14
Search vendor "Php" for product "Php" and version "5.3.14"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.15
Search vendor "Php" for product "Php" and version "5.3.15"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.16
Search vendor "Php" for product "Php" and version "5.3.16"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.17
Search vendor "Php" for product "Php" and version "5.3.17"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.18
Search vendor "Php" for product "Php" and version "5.3.18"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.19
Search vendor "Php" for product "Php" and version "5.3.19"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.20
Search vendor "Php" for product "Php" and version "5.3.20"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.0
Search vendor "Php" for product "Php" and version "5.4.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.1
Search vendor "Php" for product "Php" and version "5.4.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.2
Search vendor "Php" for product "Php" and version "5.4.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.3
Search vendor "Php" for product "Php" and version "5.4.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.4
Search vendor "Php" for product "Php" and version "5.4.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.5
Search vendor "Php" for product "Php" and version "5.4.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.6
Search vendor "Php" for product "Php" and version "5.4.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.7
Search vendor "Php" for product "Php" and version "5.4.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.8
Search vendor "Php" for product "Php" and version "5.4.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.9
Search vendor "Php" for product "Php" and version "5.4.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.10
Search vendor "Php" for product "Php" and version "5.4.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.11
Search vendor "Php" for product "Php" and version "5.4.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.12
Search vendor "Php" for product "Php" and version "5.4.12"
-
Affected