php上传漏洞 .zip,CVE-2008-5658 PHP ZipArchive::extractTo()函数.zip文件目录遍历漏洞-漏洞情报、漏洞详情、安全漏洞、CVE - 安全客，安全资讯平台...

|参考资料

来源:FEDORA

名称:FEDORA-2009-3848

链接:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html

来源:FEDORA

名称:FEDORA-2009-3768

链接:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html

来源:XF

名称:php-ziparchive-directory-traversal(47079)

链接:http://xforce.iss.net/xforce/xfdb/47079

来源:MISC

链接:http://www.sektioneins.de/advisories/SE-2008-06.txt

来源:SECTRACK

名称:1021303

链接:http://www.securitytracker.com/id?1021303

来源:BID

名称:32625

链接:http://www.securityfocus.com/bid/32625

来源:BUGTRAQ

名称:20090302rPSA-2009-0035-1phpphp-cgiphp-imapphp-mcryptphp-mysqlphp-mysqliphp-pgsqlphp-soapphp-xslphp5php5-cgiphp5-imapphp5-mcryptphp5-mysqlphp5-mysqliphp5-pearphp5-pgsqlphp5-soapphp5-xsl

链接:http://www.securityfocus.com/archive/1/archive/1/501376/100/0/threaded

来源:REDHAT

名称:RHSA-2009:0350

链接:http://www.redhat.com/support/errata/RHSA-2009-0350.html

来源:www.php.net

链接:http://www.php.net/ChangeLog-5.php#5.2.7

来源:MLIST

名称:[oss-security]20081204CVEforSE-2008-06inPHP5.2.7(ZipArchive)