CVE-2004-1020
PHP 4.3.9 - Directory Traversal and Arbitrary File Read via addslashes NULL Character Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1020. PoCs published by Daniel Fabian.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in PHP4 and PHP5 on Windows systems, allowing arbitrary file disclosure and upload. It includes example URLs demonstrating the attack vectors but lacks executable exploit code.
Description
The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.
Exploits (1)
The provided text describes a directory traversal vulnerability in PHP4 and PHP5 on Windows systems, allowing arbitrary file disclosure and upload. It includes example URLs demonstrating the attack vectors but lacks executable exploit code.