Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-4010

Опубликовано: 26 июл. 2007
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote attackers to execute arbitrary commands via the win_shell_execute function.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 87%
0.03547
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
около 18 лет назад

The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote attackers to execute arbitrary commands via the win_shell_execute function.

debian
около 18 лет назад

The win32std extension in PHP 5.2.3 does not follow safe_mode and disa ...

github
больше 3 лет назад

The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote attackers to execute arbitrary commands via the win_shell_execute function.

EPSS

Процентиль: 87%
0.03547
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other