CVE-2002-0484

PHP - Path Traversal

Title source: llm

Description

move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Tozz · phplocalphp
https://www.exploit-db.com/exploits/21347

Scores

EPSS 0.0559
EPSS Percentile 90.3%

Details

Status published
Products (30)
php/php 3.0
php/php 3.0.1
php/php 3.0.2
php/php 3.0.3
php/php 3.0.4
php/php 3.0.5
php/php 3.0.6
php/php 3.0.7
php/php 3.0.8
php/php 3.0.9
... and 20 more
Published Aug 12, 2002
Tracked Since Feb 18, 2026