vendor:
PHP
by:
Maksymilian Arciemowicz
7.5
CVSS
HIGH
Restriction-Bypass
264
CWE
Product Name: PHP
Affected Version From: PHP 5.2.9
Affected Version To: PHP 5.2.9
Patch Exists: NO
Related CWE: N/A
CPE: a:php:php:5.2.9
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
PHP 5.2.9 curl safe_mode & open_basedir bypass
PHP is prone to a 'safe_mode' and 'open_basedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations. This vulnerability would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code, with the 'safe_mode' and 'open_basedir' restrictions assumed to isolate the users from each other.
Mitigation:
Ensure that the 'safe_mode' and 'open_basedir' restrictions are properly configured to isolate users from each other.
