Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function. NOTE: this issue does not cross privilege boundaries in most contexts, so perhaps it should not be included in CVE.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP Foreign Function Interface 扩展名任意代码执行漏洞
Vulnerability Description
PHP 5.0.5版本的Foreign Function Interface (ffi)扩展名没有遵循safe_mode的限制,这会允许见机行事的攻击者通过上传一个任意DLL并调用一个函数，执行任意代码，例如通过kernel32.dll和WinExec函数。
CVSS Information
N/A
Vulnerability Type
N/A