CVE-1999-0238: PHP

High severity, CVSS 10.0. EPSS: 6.1% chance of exploitation in the next 30 days.

php.cgi allows attackers to read any file on the system.

Affected products

• PHP PHP: version 1.0 only; version 2.0 only; version 2.0b10 only

Published 1997-08-01. Last modified 2026-06-16.