CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2000-0860

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 77.7%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2000-0860

Php » Php » Version: 1.0

cpe:2.3:a:php:php:1.0
Php » Php » Version: 2.0

cpe:2.3:a:php:php:2.0
Php » Php » Version: 2.0b10

cpe:2.3:a:php:php:2.0b10
Php » Php » Version: 3.0

cpe:2.3:a:php:php:3.0
Php » Php » Version: 3.0.1

cpe:2.3:a:php:php:3.0.1
Php » Php » Version: 3.0.10

cpe:2.3:a:php:php:3.0.10
Php » Php » Version: 3.0.11

cpe:2.3:a:php:php:3.0.11
Php » Php » Version: 3.0.12

cpe:2.3:a:php:php:3.0.12
Php » Php » Version: 3.0.13

cpe:2.3:a:php:php:3.0.13
Php » Php » Version: 3.0.2

cpe:2.3:a:php:php:3.0.2
Php » Php » Version: 3.0.3

cpe:2.3:a:php:php:3.0.3
Php » Php » Version: 3.0.4

cpe:2.3:a:php:php:3.0.4
Php » Php » Version: 3.0.5

cpe:2.3:a:php:php:3.0.5
Php » Php » Version: 3.0.6

cpe:2.3:a:php:php:3.0.6
Php » Php » Version: 3.0.7

cpe:2.3:a:php:php:3.0.7
Php » Php » Version: 3.0.8

cpe:2.3:a:php:php:3.0.8
Php » Php » Version: 3.0.9

cpe:2.3:a:php:php:3.0.9
Php » Php » Version: 4.0

cpe:2.3:a:php:php:4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2000-0860

Products

Pricing

Contact Us