CVE-2007-1701

PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization…

published March 27, 2007

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09233 · 95.3th percentile
Published
2007-03-27T01:00Z
EPSS history
Timeline
  • 27 MAR 01:00Z
    PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization…
    cvelistv5