CVE-2007-5447
published 2007-10-14CVE-2007-5447: ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_functions restrictions, which allows…
PriorityP429medium4.3CVSS 2.0
AVNACMAuNCPINAN
EXPLOIT
EPSS
4.58%
90.5th percentile
ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncube_read_file function.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ioncube | php_encoder | — | — |
| php | php | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/41708http://secunia.com/advisories/27178http://www.securityfocus.com/bid/26024https://exchange.xforce.ibmcloud.com/vulnerabilities/37227https://www.exploit-db.com/exploits/4517http://osvdb.org/41708http://secunia.com/advisories/27178http://www.securityfocus.com/bid/26024https://exchange.xforce.ibmcloud.com/vulnerabilities/37227https://www.exploit-db.com/exploits/4517
2007-10-14
Published