CVE-2001-1247

Published: Dec 6, 2001
Updated: Apr 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2001-1247" target="_blank" rel="noopener"> CVE-2001-1247
Severity: Medium
Exploit:

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.