CVE-2007-1369 in Zend Platformजानकारी

सारांश

द्वारा VulDB • 05/07/2026

ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 aur usse pehle ki versions mein local users ko system ke php.ini file ko modify karne ki anumati deta hai, jismein -f parameter ka upyog karke php.ini file ki ek copy edit karna shamil hai, aur phir attacker dwara control kiye gaye php.ini file wale directory ka use karke symlink attack perform karna hota hai, aur is directory ko /usr/local/Zend/etc se link karna hota hai.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

आरक्षित करना

09/03/2007

प्रकटीकरण

09/03/2007

प्रविष्टि

2

संबंधित करना

दिखाना

EPSS

0.00644

गतिविधियाँ

बहुत कम

स्रोत

Do you want to use VulDB in your project?

Use the official API to access entries easily!