Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2005-3391

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP 4.4.1之前版本中的多个漏洞可能允许本地攻击者通过ext/curl和ext/gd模块绕过safe_mode或open_basedir限制，访问受限资源。

AI Predicted 7.5 Difficulty: Moderate EPSS 6.90% · P94
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-3391

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PHP cURL和GD多个Safe_Mode和Open_Basedir限制绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP 4.4.1之前版本中的多个漏洞可能允许本地攻击者通过ext/curl和ext/gd模块绕过safe_mode或open_basedir限制，访问受限资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-3391

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-3391

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-3391 (16)

Mailing List Discussions for CVE-2005-3391 (1)

Other References for CVE-2005-3391 (1)

Other References for CVE-2005-3391 (6)

Same Patch Batch · n/a · 2005-11-01 · 44 CVEs total

CVE-2005-3402 Mozilla Thunderbird不安全SMTP认证协议协商漏洞
CVE-2005-3405 Atutor执行任意PHP函数漏洞
CVE-2005-3404 ATutor多个PHP文件包含漏洞
CVE-2005-3406 phpESP跨站脚本漏洞
CVE-2005-2977 PAM Unix_Chkpwd暴力密码破解漏洞
CVE-2005-3387 Ntop ntop.init不安全临时文件创建漏洞
CVE-2005-3388 PHP phpinfo()跨站脚本漏洞
CVE-2005-3389 PHP parse_str()函数激活register_globals变量漏洞
CVE-2005-3390 PHP文件上传$GLOBALS变量覆盖漏洞
CVE-2005-3408 Greg GCards News.PHP SQL注入漏洞
CVE-2005-3403 ATutor多个跨站脚本漏洞
CVE-2005-3401 TheHacker病毒扫描绕过漏洞
CVE-2005-3400 Fortinet病毒扫描绕过漏洞
CVE-2005-3399 CAT-QuickHeal病毒扫描绕过漏洞
CVE-2005-3398 Sun Solaris管理控制台HTTP TRACE信息泄露漏洞
CVE-2005-3397 Comersus BackOffice comersus_backoffice_supportError.asp跨站脚本攻击(XSS)漏洞
CVE-2005-3396 IBM AIX chcons命令本地溢出漏洞
CVE-2005-3395 Invision Gallery Index.PHP SQL注入漏洞
CVE-2005-3394 OaBoard Forum.PHP多个SQL注入漏洞
CVE-2005-3393 OpenVPN客户端远程格式串处理漏洞

Showing top 20 of 44 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-3391

No comments yet

Leave a comment