CVE-2003-0863

CVE-2003-0863 describes a vulnerability in PHP 4.3.x where the php_check_safe_mode_include_dir function incorrectly returns a success value when the safe_mode_include_dir variable is undefined, potentially enabling remote attackers to bypass safe_mode restrictions for file inclusion. This vulnerability has a CVSS score of 7.5, indicating high severity with network-based attacks, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.