CVE:CVE-2007-4889
CNNVD:CNNVD-200709-170
PHP中的MySQL扩展允许远程攻击者可以借助MySQL (1) LOAD_FILE, (2) INTO DUMPFILE,以及(3) INTO OUTFILE函数绕过安全模式和打开文件基础目录(open_basedir)限制。
solution:Upgrade php mysql_extension to a higher version than *; Upgrade php php to a higher version than 5.2.4,and avoid the version (,5.2.4]