Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1392. PoCs published by FraMe.
AI-analyzed exploit summary This exploit demonstrates a bypass of PHP's 'open_basedir' restriction via cURL by accessing arbitrary files using the 'file://' protocol. It leverages a vulnerability in the cURL module to read sensitive files like '/etc/parla' with web server privileges.
Description
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.
Exploits (1)
This exploit demonstrates a bypass of PHP's 'open_basedir' restriction via cURL by accessing arbitrary files using the 'file://' protocol. It leverages a vulnerability in the cURL module to read sensitive files like '/etc/parla' with web server privileges.