CVE-2003-0249

CVE-2003-0249 describes a vulnerability in PHP where unknown HTTP methods, like "PoSt", are processed as GET requests, potentially bypassing intended access restrictions on servers like Apache httpd 2.0. This could lead to unauthorized access to sensitive information or functionality. The vulnerability has a CVSS score of 7.5, indicating high severity due to its network attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While the Apache security team disputes this as a design feature, there is no evidence of active exploitation, and no public exploit code is available, though it has garnered significant community discussion.