Description

Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

Remediation

References

CVE-2002-0229

Related Vulnerabilities

Jenkins Reliance on Reverse DNS Resolution for a Security-Critical Action Vulnerability (CVE-2026-33002)

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.32)

WordPress CVE-2016-5832 Vulnerability (CVE-2016-5832)

Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3613)

Oracle Database Server CVE-2019-2571 Vulnerability (CVE-2019-2571)

Severity

High

Classification

CVE-2002-0229

Tags

Missing Update Known Vulnerabilities