CVE-2008-5625
PHP < 5.2.7 - Arbitrary File Write via .htaccess error_log Directive
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5625. PoCs published by SecurityReason.
AI-analyzed exploit summary The document describes a safe_mode bypass vulnerability in PHP 5.2.6 where the error_log directive can be manipulated via .htaccess when safe_mode is enabled using php_admin_flag, allowing arbitrary file writes. It includes technical details, affected configurations, and a simple exploit example.
Description
PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess file.
Exploits (1)
The document describes a safe_mode bypass vulnerability in PHP 5.2.6 where the error_log directive can be manipulated via .htaccess when safe_mode is enabled using php_admin_flag, allowing arbitrary file writes. It includes technical details, affected configurations, and a simple exploit example.