CVE-2008-2666

Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a…

published June 20, 2008

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13923 · 96.5th percentile
Published
2008-06-20T01:00Z
EPSS history
Timeline
  • 20 JUN 01:00Z
    Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a…
    cvelistv5