CVE-2000-0059

Published: Jan 4, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.

Affected (14)

Products: Php: Php

Php

1 product

Php

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 3.0.10
Php Php	Version 3.0.11
Php Php	Version 3.0.12
Php Php	Version 3.0.13
Php Php	Version 3.0.1
Php Php	Version 3.0.2
Php Php	Version 3.0.3
Php Php	Version 3.0.4
Php Php	Version 3.0.5
Php Php	Version 3.0.6
Php Php	Version 3.0.7
Php Php	Version 3.0.8
Php Php	Version 3.0.9
Php Php	Version 3.0

References (2)

http://www.securityfocus.com/bid/911

Source: cve@mitre.org

http://www.securityfocus.com/bid/911

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.