Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Permissions Privileges and Access Controls Vulnerability - CVE-2008-7002 - Vulnerability Database
PHP

PHP Permissions Privileges and Access Controls Vulnerability - CVE-2008-7002

High
Reference: CVE-2008-7002
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-7002
Title: PHP Permissions Privileges and Access Controls Vulnerability
Overview:

PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions which might allow local users to bypass intended access restrictions and call programs outside of the intended directory via the (1) exec (2) system (3) shell_exec (4) passthru or (5) popen functions possibly involving pathnames such as quotC:quot drive notation.