PT-2007-5223 · Php · Php

Shinnai · Publicado 2007-07-25 · Atualizado 2017-09-29 · CVE-2007-4010

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PHP version 5.2.3

Description: The issue concerns the win32std extension in PHP, which fails to adhere to safe mode and disable functions restrictions. This allows remote attackers to execute arbitrary commands via the win shell execute function.

Recommendations: For PHP version 5.2.3, consider disabling the win shell execute function as a temporary workaround until a patch is available. Restrict access to the win32std extension to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-4010

Produtos afetados

Php

Referências · 6

• 🔥 https://exploit-db.com/exploits/4218 · Exploit
• 🔥 http://securityfocus.com/bid/25041 · Exploit
• http://milw0rm.com/exploits/4218 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4010 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4010 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35604 · Nota