CVE-2003-0863

The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...

CVE-2009-3559: Undefined Security Weakness

main/streams/plainwrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safemodeincludedir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that...

CVE-2009-3559

CVE-2009-3559 corresponds to a PHP 5.3.x issue where PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive. According to SUSE and Mandriva advisories, this affects PHP 5.3.0–5.3.0.x prior to 5.3.1 and is linked to a safe_mode_include_dir bypass/bypass-like condition causin...