2 matches found
CVE-2003-0863
The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...
CVE-2009-3559
CVE-2009-3559 corresponds to a PHP 5.3.x issue where PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive. According to SUSE and Mandriva advisories, this affects PHP 5.3.0–5.3.0.x prior to 5.3.1 and is linked to a safe_mode_include_dir bypass/bypass-like condition causin...