Unscored CVE-2007-4889 EUVD-2007-4870GHSA-chpc-3cm4-f9gq

The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions via the MySQL (1) LO…

Published Sep 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions via the MySQL (1) LOAD_FILE, (2) INTO DUMPFILE, and (3) INTO OUTFILE functions, a different issue than CVE-2007-3997.

References

3134 third-party-advisory
20070911 PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass mailing-list
php-multiple-functions-security-bypass(36555) vdb-entry
20070912 Re: PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass mailing-list
20070912 Re Re: PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass mailing-list