critical10.0Public exploit code
CVE-2000-0059
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP 3.0.13 - 'Safe_mode' Failure2000-01-04 · remote · php · Verified
Impact
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5 |