Summary
PHP is prone to a safe_mode and open_basedir restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations.
This vulnerability would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code, with the safe_mode and open_basedir restrictions assumed to isolate the users from each other.
PHP 5.2.9 is vulnerable
other versions may also be affected.
References
Updated on 2015-03-25
