CVE-2006-3011

PoC —

CVSS 2.0

4.6 medium

EPSS

—

Published

Jun 26, 2006 (Jun 26, 2006)

Modified

Sep 23, 2026

Description

The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.

Vendors: php
Products: php
Weakness: CWE-264
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

NVD CVE.org GitHub PoCs EPSS (—)

In the news0 stories

No ingested article mentions this CVE yet.