high7.5Public exploit code
CVE-2007-4596
The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP 'Perl' Extension - 'Safe_mode' Bypass2007-08-25 · local · windows · Verified
Impact
The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | All versions |