CVE-2007-1382

The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to execute cmd.exe, which bypasses PHP's safe mode.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-03-10

Last modified

2024-08-07

Affected products

• Com Extensions (Php)

References

• https://www.exploit-db.com/exploits/3429