Vulnerability
CVE-2002-0484
MEDIUM 5.0
public exploit
CVE-2002-0484 is a medium-severity vulnerability (CVSS v2 5.0). As of 2026-10-11, 131 hosts in our data show software it affects on an open service in at least 15 countries.
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- CVSS score
- 5.0 CVSS v2
- CVSS vector (v2)
- AV:N/AC:L/Au:N/C:N/I:P/A:N
- Exploit likelihood (EPSS)
- 9.5% in the next 30 days (top 5% of CVEs)
Exposure in our data
131 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 3 hosts with this CVE only from an older observation.
11 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-10-11 04:20 UTC
By country
| United States US | 51 |
| Germany DE | 17 |
| Japan JP | 8 |
| Spain ES | 7 |
| Italy IT | 7 |
| Finland FI | 5 |
| United Kingdom GB | 4 |
| Netherlands NL | 4 |
| Hong Kong HK | 3 |
| Taiwan TW | 3 |
| Switzerland CH | 2 |
| France FR | 2 |
| Hungary HU | 2 |
| Ireland IE | 2 |
| Sweden SE | 2 |
Affected software seen
| php 4.1.2 | 98 |
| php 4.0.5 | 8 |
| php 3.0.18 | 7 |
| php 4.0.3 | 4 |
| php 4.0.6 | 3 |
| php 3.0.15 | 2 |
| php 4.0.1 | 2 |
| php 4.1.0 | 2 |
| php 3.0.12 | 1 |
| php 3.0.14 | 1 |
| php 3.0.16 | 1 |
| php 4.0.0 | 1 |