CVE-2002-0484
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/08/2002
Last modified:
20/11/2024
Description
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:* | ||
cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://bugs.php.net/bug.php?id=16128
- http://marc.info/?l=bugtraq&m=101683938806677&w=2
- http://online.securityfocus.com/archive/1/262999
- http://online.securityfocus.com/archive/1/263259
- http://www.iss.net/security_center/static/8591.php
- http://www.securityfocus.com/bid/4325
- http://bugs.php.net/bug.php?id=16128
- http://marc.info/?l=bugtraq&m=101683938806677&w=2
- http://online.securityfocus.com/archive/1/262999
- http://online.securityfocus.com/archive/1/263259
- http://www.iss.net/security_center/static/8591.php
- http://www.securityfocus.com/bid/4325