Description

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.

Remediation

References

CVE-2001-1247

Related Vulnerabilities

MongoDb Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-9741)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9059)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2044)

Oracle JRE CVE-2013-5804 Vulnerability (CVE-2013-5804)

WordPress Plugin Keyword Meta Cross-Site Request Forgery (3.0)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2001-1247