Description

PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.

Remediation

References

CVE-2004-1392

Related Vulnerabilities

Jetty Improper Resource Shutdown or Release Vulnerability (CVE-2022-2191)

WordPress Plugin Events Shortcodes For The Events Calendar Unspecified Vulnerability (1.7.2)

WordPress Plugin Phoenix Media Rename Security Bypass (3.4.2)

Joomla! Core 1.0.x Remote File Inclusion (1.0.11 - 1.0.14)

WordPress Plugin Post video players, slideshow albums, photo galleries and music/podcast playlist Cross-Site Scripting (1.136)

Severity

Medium

Classification

CVE-2004-1392

Tags

Missing Update Known Vulnerabilities