CVE-2006-1494: PHP

Low severity, CVSS 2.6. EPSS: 6.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.

Affected products

• PHP PHP: version 4.0 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; …

Published 2006-04-10. Last modified 2026-06-16.