CVE-2000-0059 PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
HighCVSS 10.0
EPSS 10.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 3.0 | No fix listed |
| PHP | = 3.0.1 | No fix listed |
| PHP | = 3.0.2 | No fix listed |
| PHP | = 3.0.3 | No fix listed |
| PHP | = 3.0.4 | No fix listed |
| PHP | = 3.0.5 | No fix listed |
| PHP | = 3.0.6 | No fix listed |
| PHP | = 3.0.7 | No fix listed |
| PHP | = 3.0.8 | No fix listed |
| PHP | = 3.0.9 | No fix listed |
| PHP | = 3.0.10 | No fix listed |
| PHP | = 3.0.11 | No fix listed |
| PHP | = 3.0.12 | No fix listed |
| PHP | = 3.0.13 | No fix listed |
References
- 911 vdb-entry