CVE

Id
25067  
CVE No.
CVE-2007-1710  
Status
Candidate  
Description
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence.  
Phase
Assigned (20070326)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249307 25067 CVE-2007-1710 MILW0RM:3573  View
249308 25067 CVE-2007-1710 URL:http://www.milw0rm.com/exploits/3573  View
249309 25067 CVE-2007-1710 HP:HPSBMA02215  View
249310 25067 CVE-2007-1710 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506  View
249311 25067 CVE-2007-1710 HP:SSRT071423  View
249312 25067 CVE-2007-1710 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506  View
249313 25067 CVE-2007-1710 HP:HPSBTU02232  View
249314 25067 CVE-2007-1710 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137  View
249315 25067 CVE-2007-1710 HP:SSRT071429  View
249316 25067 CVE-2007-1710 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137  View
249317 25067 CVE-2007-1710 VUPEN:ADV-2007-1991  View
249318 25067 CVE-2007-1710 URL:http://www.vupen.com/english/advisories/2007/1991  View
249319 25067 CVE-2007-1710 VUPEN:ADV-2007-2374  View
249320 25067 CVE-2007-1710 URL:http://www.vupen.com/english/advisories/2007/2374  View
249321 25067 CVE-2007-1710 SECUNIA:25423  View
249322 25067 CVE-2007-1710 URL:http://secunia.com/advisories/25423  View
249323 25067 CVE-2007-1710 SECUNIA:25850  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53060 JVNDB-2007-001752 ActiveWebSoftwares Active Auction の default.asp における SQL インジェクションの脆弱性 ActiveWebSoftwares Active Auction の default.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1712 25067 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001752.html  View