CVE-2002-0229: PHP

High severity, CVSS 7.5. EPSS: 9.6% chance of exploitation in the next 30 days.

Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

Affected products

• PHP PHP: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.0.5 only; …

Published 2002-05-16. Last modified 2026-06-16.