DerScanner
Home / Vulnerability Database / PHP : Dynamic loading of extensions
PHP

PHP : Dynamic loading of extensions

Classification

OWASP Top 10 2017
A6-Security Misconfiguration
OWASP Top 10 2021
A5-Security Misconfiguration

Overview

The enable_dl option being enabled mean that dynamic loading of PHP extensions with dl() function is possible. Dynamic loading can be on or off for each virtual server or directory.

Enabled enable_dl option helps to ignore all open_basedirrestrictions that negatively affects the security of the application.

References

  1. Runtime Configuration - php.net
  2. OWASP Top 10 2017-A6-Security Misconfiguration
LOW

DerScanner Severity Score

Do you want to fix PHP : Dynamic loading of extensions in your application?

See also

PHP

PHP : Null salt

PHP

PHP : Empty password

PHP

PHP : Empty salt