CVE-2012-3365
PHP < 5.3.15 - open_basedir Protection Bypass via SQLite Functionality
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-3365. PoCs published by BlackFan.
AI-analyzed exploit summary This PoC demonstrates an open_basedir bypass in PHP versions prior to 5.3.15 by leveraging SQLite3's handling of the ':memory:' database path to write a PHP shell outside the restricted directory. The exploit creates a malicious PHP file by abusing SQLite's file path resolution.
Description
The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.
Exploits (1)
This PoC demonstrates an open_basedir bypass in PHP versions prior to 5.3.15 by leveraging SQLite3's handling of the ':memory:' database path to write a PHP shell outside the restricted directory. The exploit creates a malicious PHP file by abusing SQLite's file path resolution.