CVE-2007-4010

CVE-2007-4010 concerns the win32std PHP extension in PHP 5.2.3, which does not enforce safe_mode or disable_functions restrictions. This allows remote attackers to execute arbitrary commands via the win_shell_execute function. The description explicitly states the root cause as improper enforceme...