CVE-2007-1460

The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or open_basedir checks, which…

published March 14, 2007

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or open_basedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01997 · 80.5th percentile
Published
2007-03-14T18:00Z
EPSS history
Timeline
  • 14 MAR 18:00Z
    The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or open_basedir checks, which…
    cvelistv5