Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP MySQL绕过安全模式访问限制漏洞
Vulnerability Description
PHP是种Server端嵌入式脚本语言，适用于Windows、Linux和许多Unix变体。它常用于WEB开发，提供了非常灵活的配置。 从PHP 3.0开始支持安全模式。在该模式下，PHP脚本功能受到极大限制，只能通过一个封装函数访问本地文件系统。可以在配置中指定允许访问(读、写、执行)哪些文件，并由封装函数进行这项检查。 但是PHP携带的MySQL Library实现"LOAD DATA LOCAL INFILE"时没有使用封装函数，攻击者可以通过MySQL绕过安全模式的访问限制。攻击者可以上传一个PH
CVSS Information
N/A
Vulnerability Type
N/A