CVE-2007-1452

Published: Mar 14, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.

Affected (17)

Products: Php: Php

Php

1 product

Php

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.0.0
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.0 rc1
Php Php	Version 5.0 rc2
Php Php	Version 5.0 rc3
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0

References (4)

http://www.php-security.org/MOPB/MOPB-17-2007.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/22906

Source: cve@mitre.org

http://www.php-security.org/MOPB/MOPB-17-2007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22906

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.