CVE-2007-5899

Published: Nov 20, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.

Affected (1)

Products: Php: Php

Php

1 product

Php

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.2.4

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (60)

http://bugs.php.net/bug.php?id=42869

Source: cve@mitre.org

http://osvdb.org/38918

Source: cve@mitre.org

http://secunia.com/advisories/27659

Source: cve@mitre.org

http://secunia.com/advisories/27864

Source: cve@mitre.org

http://secunia.com/advisories/28249

Source: cve@mitre.org

http://secunia.com/advisories/30040

Source: cve@mitre.org

http://secunia.com/advisories/30828

Source: cve@mitre.org

http://secunia.com/advisories/31119

Source: cve@mitre.org

http://secunia.com/advisories/31124

Source: cve@mitre.org

http://secunia.com/advisories/31200

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1444

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:125

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:126

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:127

Source: cve@mitre.org

http://www.php.net/ChangeLog-5.php#5.2.5

Source: cve@mitre.org

http://www.php.net/releases/5_2_5.php

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0505.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0544.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0545.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0546.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0582.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/491693/100/0/threaded

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-549-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-628-1

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1943

Source: cve@mitre.org

https://launchpad.net/bugs/173043

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11211

Source: cve@mitre.org

https://usn.ubuntu.com/549-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html

Source: cve@mitre.org

http://bugs.php.net/bug.php?id=42869