CVE:CVE-2007-5447
CNNVD:CNNVD-200710-279
PHP 5.2.4版本的ionCube Loader 6.5 扩展名的ioncube_loader_win_5.2.dll没有遵循safe_mode和disable_functions限制,这会允许见机行事的攻击者可以借助ioncube_read_file函数，绕过预设限制，如读取任意文件。
solution:Upgrade ioncube php_encoder to a higher version than 6.5,and avoid the version 6.5; Upgrade php php to a higher version than 5.2.4,and avoid the version 5.2.4