CVE-2002-0484
PHP - Unauthenticated Arbitrary File Write via move_uploaded_file
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-0484. PoCs published by Tozz.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in PHP's move_uploaded_file function, allowing file uploads outside the open_basedir restriction. It provides a simple form to upload files to an arbitrary directory, bypassing intended security constraints.
Description
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in PHP's move_uploaded_file function, allowing file uploads outside the open_basedir restriction. It provides a simple form to upload files to an arbitrary directory, bypassing intended security constraints.