high7.5Public exploit code
CVE-2007-4255
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect f…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP mSQL (msql_connect) - Local Buffer Overflow2007-08-08 · local · windows · Verified
- PHP mSQL (msql_connect) - Local Buffer Overflow (PoC)2007-08-06 · dos · multiple · Verified
Impact
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | Version 5.2.3 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/475660/100/0/threaded
- http://www.securityfocus.com/bid/25213
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35830
- https://www.exploit-db.com/exploits/4260
- http://www.securityfocus.com/archive/1/475660/100/0/threaded
- http://www.securityfocus.com/bid/25213
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35830
- https://www.exploit-db.com/exploits/4260