high7.5Public exploit code
CVE-2003-0863
The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specif…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP 4.3.x - Undefined Safe_Mode_Include_Dir Safemode Bypass2003-07-16 · local · php · Verified
Impact
The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP applications.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | Versions 4.3.0, 4.3.1, 4.3.2 |