Synced 07 Nov 2026 15:45 UTC Account
← All products

CVE-2000-0059

HIGH severity · CVSS 10
10CVSS HIGH

Summary

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.

Impact & exploitability

Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)11%

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

PHP

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.