VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 30, 2015· Updated Jun 17, 2026

CVE-2013-6501

CVE-2013-6501

Description

The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • PHP/PHP2 versions
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: <=5.6.7
    • (no CPE)range: <=5.6.7
  • SUSE S.A./Linux Enterprise Server2 versions
    cpe:2.3:o:suse:linux_enterprise_server:11.0:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:suse:linux_enterprise_server:11.0:sp3:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:11.0:sp3:*:*:vmware:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.