← Database

CVE-2007-5900

MEDIUM CVSS: 6.9 Published: 2007-11-20 Modified: 2026-06-16

Description

PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.

Affected Platforms

Php Php

Weakness Type

CWE-264

References