CVE-2006-3011EPSS p70.4%

CVE-2006-3011CVE-2006-3011

php / php

Description

The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.

Scoring

CVSS 4.6 ()
VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS1.34% probability of exploitation · percentile 70.4% · 2026-10-05T12:00:23Z
Last modified2026-09-23
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.