Description
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
Remediation
References
Related Vulnerabilities
Atlassian Jira Improper Authentication Vulnerability (CVE-2019-20412)
WebLogic CVE-2023-21838 Vulnerability (CVE-2023-21838)
phpMyFAQ Improper Access Control Vulnerability (CVE-2023-2429)
Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.10)
Craft CMS Improper Authorization Vulnerability (CVE-2026-33162)