CVE-2000-0059

High

Published: 04/01/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

10.92%

95th percentile - higher than 95% of all known CVEs

Summary

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands executed by popen, which could allow remote attackers to execute commands.

Risk Assessment

Attackers could exploit this vulnerability to execute commands remotely on the server, posing a serious security threat.

Recommendation

It is recommended to disable safe_mode or implement additional security measures to filter shell metacharacters.

Original NVD description (English source)

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.