blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2002-0229

HIGH 7.5 CVSS 2.0
Published
May 16, 2002
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

Affected products and versions

  • PHP versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.16, 4.0, 4.0.1, 4.0.1patch2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.1.0, 4.1.2

References

  • marc.info http://marc.info/?l=bugtraq&m=101286577109716&w=2
  • marc.info http://marc.info/?l=bugtraq&m=101304702002321&w=2
  • marc.info http://marc.info/?l=ntbugtraq&m=101285016125377&w=2
  • marc.info http://marc.info/?l=ntbugtraq&m=101303065423534&w=2
  • marc.info http://marc.info/?l=ntbugtraq&m=101303819613337&w=2
  • www.iss.net http://www.iss.net/security_center/static/8105.php Vendor Advisory
  • www.securityfocus.com http://www.securityfocus.com/bid/4026
  • nvd.nist.gov Official NVD record