Vulnerabilities > PHP > PHP > 3.0.13

DATE CVE VULNERABILITY TITLE RISK
2002-08-12 CVE-2002-0484 Unspecified vulnerability in PHP
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.
network
low complexity
php
5.0
5.0
2002-05-16 CVE-2002-0229 Unspecified vulnerability in PHP
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
network
low complexity
php
7.5
7.5
2000-11-14 CVE-2000-0860 Unspecified vulnerability in PHP
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
network
low complexity
php
5.0
5.0
2000-01-04 CVE-2000-0059 Unspecified vulnerability in PHP
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
network
low complexity
php
critical
 10.0
10