PHP version 5.2.6 suffers from a safe_mode bypass vulnerability in chdir() and ftok().
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/67468/php526-chdirftok.txt
Source: https://packetstormsecurity.com/files/67468/php526-chdirftok.txt.html