CVE-2007-1382

The CVE-2007-1382 entry concerns the PHP COM extensions for PHP on Windows. The vulnerability arises when a context-dependent attacker uses a WScript.Shell COM object’s Run method to execute cmd.exe, bypassing PHP’s Safe Mode and enabling arbitrary code execution. The affected component is the PH...

PHP COM extension safe_mode protection bypass

WScript.Shell COM object allows execution of any commands...