CVE-2007-4596

The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function

published August 30, 2007

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08248 · 94.9th percentile
Published
2007-08-30T17:00Z
EPSS history
Timeline
  • 30 AUG 17:00Z
    The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function
    cvelistv5