Description
PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.
Remediation
References
Related Vulnerabilities
Drupal Core 8.6.x Multiple Vulnerabilities (8.6.0 - 8.6.14)
WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.6)
WordPress Plugin Ninja Announcements Lite 'ninja_annc.php' SQL Injection (1.2.3)
WordPress Plugin WP Shieldon-WordPress Firewall Cross-Site Scripting (1.6.3)
WordPress Plugin Custom Dashboard & Login Page-AGCA Multiple Unspecified Vulnerabilities (1.5.4.2)