VULNERABILITY INTELLIGENCE
CVE-2007-5900
CVSS score6.9 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2007-11-20
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.