CVE-2012-3365

Php < 5.3.14 - Access Control

Title source: rule
STIX 2.1

Description

The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.

Exploits (1)

github WORKING POC 21 stars
by BlackFan · poc
https://github.com/BlackFan/CVE_PoCs/tree/master/CVE-2012-3365 (PHP)

Scores

EPSS 0.0092
EPSS Percentile 76.0%

Details

CWE
CWE-264
Status published
Products (46)
php/php 1.0
php/php 2.0
php/php 2.0b10
php/php 3.0
php/php 3.0.1
php/php 3.0.2
php/php 3.0.3
php/php 3.0.4
php/php 3.0.5
php/php 3.0.6
... and 36 more
Published Jul 20, 2012
Tracked Since Feb 18, 2026