CVE-2007-5900

PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to…

published November 20, 2007

CVSS
—
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.1th percentile
Published
2007-11-20T18:00Z
EPSS history
Timeline
  • 20 NOV 18:00Z
    PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to…
    cvelistv5