Description

The disable_functions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using ini_alter when ini_set is disabled.

Remediation

References

CVE-2007-5424

Related Vulnerabilities

WordPress Plugin WP-TopBar SQL Injection (5.36)

WordPress Plugin WP Flow Plus Unspecified Vulnerability (2.2.0)

WordPress Plugin Easy Social Feed-Social Photos Gallery-Post Feed-Like Box Cross-Site Scripting (6.3.9)

WordPress Plugin WP Google Maps Cross-Site Request Forgery (7.11.27)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.22)

Severity

High

Classification

CVE-2007-5424

Tags

Missing Update Known Vulnerabilities