CVE-2007-0908

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...

5.0 MediumPublic exploitFix available

CVE-2007-0908 is a medium vulnerability (CVSS 5.0) in Php, published February 13, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.2%, the 96th percentile. Fixed in php4 4:4.3.10-19.

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.

Exploit likelihood

12.2%Down 3.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2007-0908
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-0908
Updated: 2026-11-02

EUVDEUVD-2007-0902 No score

Record: EUVD-2007-0902
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cp4j-q49w-68jf No score

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...

Record: GHSA-cp4j-q49w-68jf
Weakness: CWE-20
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`php4` Debian:3.1	before 4:4.3.10-19, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-18	4:4.3.10-19
`php` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-mysql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent

Show 184 moreShow less

Affected packages
Package	Affected	Fixed
`php-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-mysql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-mysql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-mysql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-bcmath` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-cli` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-common` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-dba` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-gd` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-imap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ldap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mbstring` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mysql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ncurses` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-odbc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pdo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pgsql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-snmp` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-soap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xml` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xmlrpc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-bcmath` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-cli` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-common` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-dba` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-debuginfo` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-devel` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-gd` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-imap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ldap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mbstring` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mysql` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ncurses` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-odbc` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pdo` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pgsql` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-snmp` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-soap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xml` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xmlrpc` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-bcmath` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-cli` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-common` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-dba` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-debuginfo` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-devel` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-gd` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-imap` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-ldap` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-mbstring` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-mysql` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-ncurses` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-odbc` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-pdo` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-pgsql` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-snmp` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-soap` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-xml` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-xmlrpc` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`stronghold-php` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-devel` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-imap` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-ldap` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-manual` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-mysql` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-odbc` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-pgsql` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-snmp` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHP < 4.4.5/5.2.1 - WDDX Session Deserialization Information Leak	2007-03-04

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	aliases
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 94 moreShow less