CVE-2007-5447

EPSS 4.6%

ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncube_read_file function.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4517unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/41708 http://secunia.com/advisories/27178 https://exchange.xforce.ibmcloud.com/vulnerabilities/37227 https://www.exploit-db.com/exploits/4517 http://www.securityfocus.com/bid/26024