Description
The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote attackers to execute arbitrary commands via the win_shell_execute function.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2013-5853 Vulnerability (CVE-2013-5853)
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4901)
Microsoft SQL Server CVE-2023-29349 Vulnerability (CVE-2023-29349)
MySQL CVE-2023-22057 Vulnerability (CVE-2023-22057)
WordPress Plugin Gallery by BestWebSoft 'php.php' Arbitrary File Upload (3.06)