The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Jul 20, 2012 |
| Freebsd | — | Upgrade php52-sqliteUpgrade php5-sqliteUpgrade php53-sqlite | Dec 10, 2025 | Sep 19, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jul 20, 2012 |
| Oracle Solaris | — | Upgrade web/php-52 to version 5.2.17-0.175.1.17.0.3.0 on Solaris 11.1Upgrade web/php-53 to version 5.3.27-0.175.1.17.0.3.0 on Solaris 11.1 | May 29, 2017 | Jul 20, 2012 |
| Php | — | Upgrade to PHP version 5.3.15 | Aug 7, 2012 | Jul 20, 2012 |
| Suse | — | Upgrade php53-fastcgiUpgrade php8-ldapUpgrade php7-mysqlUpgrade php8-domUpgrade php7-sqliteUpgrade php8-sysvmsgUpgrade php53-gettextUpgrade php53-sysvmsgUpgrade php53-bz2Upgrade php7-develUpgrade php7-pgsqlUpgrade php53-ldapUpgrade php53-opensslUpgrade php7-pdoUpgrade php8-fpmUpgrade php53-pgsqlUpgrade php8-enchantUpgrade php53-posixUpgrade php53-gmpUpgrade php8-ftpUpgrade php53-wddxUpgrade php7-tokenizerUpgrade php7-xmlwriterUpgrade php53-shmopUpgrade php8-xslUpgrade php53-gdUpgrade php8-tidyUpgrade php53-pdoUpgrade php8-gmpUpgrade php8-odbcUpgrade php53-dbaUpgrade php8-gdUpgrade php7-iconvUpgrade php8-readlineUpgrade php8-tokenizerUpgrade php5-develUpgrade php8-fastcgiUpgrade php8-sodiumUpgrade php53Upgrade php8-sqliteUpgrade php8-pdoUpgrade php8-zipUpgrade php8-embedUpgrade php53-imapUpgrade php53-curlUpgrade php72-develUpgrade php53-pearUpgrade php53-xmlreaderUpgrade php53-develUpgrade php53-readlineUpgrade php53-bcmathUpgrade php53-exifUpgrade php8-curlUpgrade php53-pspellUpgrade php8-socketsUpgrade php7-domUpgrade php53-xmlrpcUpgrade php8-dbaUpgrade php53-mbstringUpgrade php53-tokenizerUpgrade php8-fileinfoUpgrade php8-shmopUpgrade php53-ftpUpgrade php53-iconvUpgrade php53-odbcUpgrade php53-socketsUpgrade php53-zipUpgrade php8Upgrade php53-suhosinUpgrade php53-mysqlUpgrade php53-tidyUpgrade php7Upgrade php8-sysvshmUpgrade php8-intlUpgrade php53-ctypeUpgrade php8-mbstringUpgrade php53-xmlwriterUpgrade php7-xmlreaderUpgrade apache2-mod_php7Upgrade php8-opcacheUpgrade php8-sysvsemUpgrade php8-iconvUpgrade php7-ctypeUpgrade php8-bcmathUpgrade php8-zlibUpgrade php53-sysvsemUpgrade php53-pcntlUpgrade php8-xmlreaderUpgrade apache2-mod_php53Upgrade php53-sqliteUpgrade php53-fileinfoUpgrade php8-mysqlUpgrade php8-opensslUpgrade php8-exifUpgrade php8-develUpgrade php8-fpm-apacheUpgrade php8-bz2Upgrade php8-snmpUpgrade php53-snmpUpgrade php53-jsonUpgrade php8-gettextUpgrade php8-pharUpgrade php53-mcryptUpgrade php53-calendarUpgrade php8-posixUpgrade php53-intlUpgrade php8-ctypeUpgrade php7-jsonUpgrade php8-ffiUpgrade php8-calendarUpgrade php8-xmlwriterUpgrade php53-domUpgrade php8-cliUpgrade php53-zlibUpgrade apache2-mod_php8Upgrade php53-soapUpgrade php8-pcntlUpgrade php8-pgsqlUpgrade php8-soapUpgrade php53-xslUpgrade php53-sysvshm | Feb 17, 2015 | Jun 27, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub