CVE-2002-0229
PHP 3.0-4.1.0 - Safe Mode Bypass via MySQL LOAD DATA INFILE LOCAL
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-0229.
AI-analyzed exploit summary This PHP script exploits a vulnerability in PHP's 'safe_mode' feature by leveraging the MySQL client library to bypass filesystem restrictions. It uses the LOAD DATA LOCAL INFILE statement to read files from restricted directories, such as '/etc/passwd'.
Description
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
Exploits (3)
This PHP script exploits a vulnerability in PHP's 'safe_mode' feature by leveraging the MySQL client library to bypass filesystem restrictions. It uses the LOAD DATA LOCAL INFILE statement to read files from restricted directories, such as '/etc/passwd'.
This exploit demonstrates a bypass of PHP's 'safe_mode' restrictions by leveraging the MySQL client library's failure to honor these restrictions. It uses a LOAD DATA LOCAL INFILE statement to read files from restricted areas of the filesystem, such as '/etc/passwd'.
This PHP script exploits CVE-2002-0229 by bypassing PHP's safe_mode restrictions via MySQL's LOAD DATA statement to read arbitrary files from the filesystem. It creates a temporary table, loads the target file into it, and retrieves the content, effectively leaking restricted file data.