NVD

Id
53890  
Name
CVE-2007-1710  
Description
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-26  
Modified Date
2013-08-03  
Seq
2007-1710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273220 53890 CVE-2007-1710 SSRT071423  View
273221 53890 CVE-2007-1710 SSRT071429  View
273222 53890 CVE-2007-1710 3573  View
273223 53890 CVE-2007-1710 ADV-2007-1991  View
273224 53890 CVE-2007-1710 ADV-2007-2374  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54903 JVNDB-2007-003595 PHP の readfile 関数における safe_mode 制限を回避される脆弱性 PHP の readfile 関数には、safe_mode 関数を回避される、および任意のファイルを読まれる脆弱性が存在します。 CVE-2007-1710 25065 CVE-2007-1710 53890 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003595.html 2007-03-26 2012-09-25 View