CVE

Id
4876  
CVE No.
CVE-2002-0484  
Status
Entry  
Description
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24962 4876 CVE-2002-0484 BUGTRAQ:20020321 Re: move_uploaded_file breaks safe_mode restrictions in PHP  View
24963 4876 CVE-2002-0484 URL:http://online.securityfocus.com/archive/1/263259  View
24964 4876 CVE-2002-0484 BUGTRAQ:20020317 move_uploaded_file breaks safe_mode restrictions in PHP  View
24965 4876 CVE-2002-0484 URL:http://online.securityfocus.com/archive/1/262999  View
24966 4876 CVE-2002-0484 BUGTRAQ:20020322 Re: move_uploaded_file breaks safe_mode restrictions in PHP  View
24967 4876 CVE-2002-0484 URL:http://marc.info/?l=bugtraq&m=101683938806677&w=2  View
24968 4876 CVE-2002-0484 CONFIRM:http://bugs.php.net/bug.php?id=16128  View
24969 4876 CVE-2002-0484 XF:php-moveuploadedfile-create-files(8591)  View
24970 4876 CVE-2002-0484 URL:http://www.iss.net/security_center/static/8591.php  View
24971 4876 CVE-2002-0484 BID:4325  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63732 JVNDB-2002-000059 PHP の Move_Uploaded_File() 関数における Open_Basedir の指定を回避される脆弱性 PHP の move_uploaded_file() 関数には、open_basedir で指定されている PHP で使用可能なベースディレクトリを適切にチェックしない不備があり、PHP が使用可能なディレクトリ外のファイルに対して上書きなどを実行される脆弱性が存在します。 CVE-2002-0484 4876 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000059.html  View