CVE-2004-1392

CVE-2004-1392 describes a vulnerability in PHP 4.0 where the cURL functions, specifically curl_init, can be exploited by remote attackers. By supplying a "file:" URL argument, attackers can bypass the open_basedir restriction and read arbitrary files on the server. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially leading to information disclosure. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.