Lucene search
MitreCVELIST:CVE-2007-1710HistoryMar 27, 2007 - 1:00 a.m.
CVE-2007-1710
2007-03-2701:00:00
mitre
www.cve.org
5
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a “php://…/…/” sequence.
References
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137
secunia.com/advisories/25423
secunia.com/advisories/25850
www.vupen.com/english/advisories/2007/1991
www.vupen.com/english/advisories/2007/2374
www.exploit-db.com/exploits/3573
Related
ubuntucve
ubuntucve
CVE-2007-1710
2007-03-27 00:00:00
securityvulns
securityvulns
PHP read_file safe_mode protection bypass
2007-03-29 00:00:00
nvd
nvd
CVE-2007-1710
2007-03-27 01:19:00
prion
prion
Design/Logic Flaw
2007-03-27 01:19:00
cve
cve
CVE-2007-1710
2007-03-27 01:19:00
redhatcve
redhatcve
CVE-2007-1710
2015-10-30 09:27:03
nessus
nessus
PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities
2007-05-04 00:00:00