PHP Safe Mode protection bypass
Published:		11.09.2006
Source:		BUGTRAQ
SecurityVulns ID:		6597
Type:		local
Level:		6/10
Description:		By usgin ini_restore function it's possible to clear safe_mode variable.

Affected:		PHP : PHP 4.4
		PHP : PHP 5.1
		PHP : PHP 5.2

Original document

Maksymilian Arciemowicz, PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore() (11.09.2006)

Discuss:

Read or add your comments to this news (0 comments)