PT-2007-5223 · Php · Php

Shinnai · Published 2007-07-25 · Updated 2017-09-29 · CVE-2007-4010

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PHP version 5.2.3

Description: The issue concerns the win32std extension in PHP, which fails to adhere to safe mode and disable functions restrictions. This allows remote attackers to execute arbitrary commands via the win shell execute function.

Recommendations: For PHP version 5.2.3, consider disabling the win shell execute function as a temporary workaround until a patch is available. Restrict access to the win32std extension to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-4010

Affected Products

Php

References · 6

• 🔥 https://exploit-db.com/exploits/4218 · Exploit
• 🔥 http://securityfocus.com/bid/25041 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4010 · Security Note
• http://milw0rm.com/exploits/4218 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4010 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35604 · Note