CVE-2007-1710: Medium severity PHP PHP vulnerability
Published Mar 27, 2007
·Updated
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence.
Affected Software
3 affected components
PHP PHP=4.4.4
PHP PHP=5.1.6
PHP PHP=5.2.1
Event History
Mar 27, 2007
CVE Published
01:19 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1710?
CVE-2007-1710 is classified as a moderate severity vulnerability due to its potential to expose sensitive files.
2
How do I fix CVE-2007-1710?
To fix CVE-2007-1710, upgrade your PHP version to 5.2.2 or later, or apply the relevant patches.
3
What software versions are affected by CVE-2007-1710?
CVE-2007-1710 affects PHP versions 4.4.4, 5.1.6, and 5.2.1.
4
What type of attack does CVE-2007-1710 facilitate?
CVE-2007-1710 facilitates local file inclusion attacks by bypassing safe_mode restrictions.
5
Can CVE-2007-1710 lead to data exposure?
Yes, CVE-2007-1710 can lead to unauthorized data exposure by allowing access to arbitrary files.