CVE-2004-1392
PHP 4.0 - Open Redirect
Title source: llmDescription
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.
Exploits (1)
References (9)
Scores
EPSS
0.0759
EPSS Percentile
91.9%
Details
Status
published
Products (8)
php/php
4.0
php/php
4.0.1 (3 CPE variants)
php/php
4.0.2
php/php
4.0.3 (2 CPE variants)
php/php
4.0.4
php/php
4.0.5
php/php
4.0.6
php/php
4.0.7 (4 CPE variants)
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026