CVE-2007-4010: Medium severity PHP PHP vulnerability
Published Jul 26, 2007
·Updated
The win32std extension in PHP 5.2.3 does not follow safemode and disablefunctions restrictions, which allows remote attackers to execute arbitrary commands via the winshellexecute function.
Affected Software
1 affected component
PHP PHP=5.2.3
Event History
Jul 26, 2007
CVE Published
12:30 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4010?
CVE-2007-4010 is classified as a critical vulnerability due to its potential to allow remote command execution.
2
How do I fix CVE-2007-4010?
To fix CVE-2007-4010, upgrade PHP to a version higher than 5.2.3 that does not contain this vulnerability.
3
What version of PHP is affected by CVE-2007-4010?
CVE-2007-4010 affects PHP version 5.2.3.
4
What are the implications of CVE-2007-4010?
CVE-2007-4010 allows remote attackers to execute arbitrary commands on the server, posing a significant security risk.
5
Is safe_mode effective against CVE-2007-4010?
No, CVE-2007-4010 bypasses safe_mode restrictions, rendering it ineffective in mitigating this vulnerability.