blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2003-0097

HIGH 7.5 CVSS 2.0
Published
March 3, 2003
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).

Affected products and versions

  • PHP versions 4.3.0

References