PHP safemode bypass
Published:		11.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8134
Type:		local
Level:		5/10
Description:		By using LOAD_FILE, INTO DUMPFILE, INTO OUTFILE SQL modifiers it's possible to access files behind basedir.

Affected:

PHP : PHP 5.2

Original document		laurent.gaffie_(at)_gmail.com, PHP <=5.2.4 open_basedir bypass & code exec & denial of service (11.09.2007)
		laurent.gaffie_(at)_gmail.com, PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass (11.09.2007)

Discuss:

Read or add your comments to this news (0 comments)