CVE-2000-0860

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of…

published January 22, 2001

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02745 · 86.0th percentile
Published
2001-01-22T05:00Z
EPSS history
Timeline
  • 22 JAN 05:00Z
    The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of…
    cvelistv5