Description

PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.

Remediation

References

CVE-2007-5900

Related Vulnerabilities

WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.113)

Oracle Database Server CVE-2006-3703 Vulnerability (CVE-2006-3703)

WordPress Plugin WooCommerce Instamojo Cross-Site Scripting (0.0.6)

Drupal CVE-2014-1475 Vulnerability (CVE-2014-1475)

Oracle Database Server CVE-2014-6452 Vulnerability (CVE-2014-6452)

Severity

Medium

Classification

CVE-2007-5900 CWE-264

Tags

Missing Update Known Vulnerabilities