CVE-2002-0484 | BDVDB-2026-5165 Detail

Description#

move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://online.securityfocus.com/archive/1/262999
http://bugs.php.net/bug.php?id=16128
http://www.iss.net/security_center/static/8591.php
http://www.securityfocus.com/bid/4325
http://marc.info/?l=bugtraq&m=101683938806677&w=2
http://online.securityfocus.com/archive/1/263259

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.