What’s Vulnerable › Vulnerabilities

CVE-2012-3365

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-20 · updated 2026-06-16
• Weakness: CWE-264

Description

The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.

Affected products

• PHP: through 5.3.14; 1.0, 2.0, 2.0b10, 3.0, 3.0.1, 3.0.2 (+110)

References

• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html
• http://osvdb.org/84100
• http://secunia.com/advisories/49969
• http://secunia.com/advisories/51178
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:108
• http://www.php.net/ChangeLog-5.php
• http://www.securityfocus.com/bid/54612
• http://www.securitytracker.com/id?1027286
• https://hermes.opensuse.org/messages/15376003
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html

Get alerted when CVE-2012-3365 or the next vulnerability affects your stack