CVE-2005-3054

CVE-2005-3054 describes a directory traversal vulnerability in PHP 4.4.0 (and potentially other versions) within the fopen_wrappers.c component. This flaw allows PHP scripts to bypass open_basedir restrictions when the directive includes a trailing slash, enabling access to files in other directories whose names are substrings of the original. With a CVSS score of 2.1 (low severity), exploitation requires local access and only impacts confidentiality, with no known exploit code, active exploitation, or significant community discussion.