CVE-2007-1701
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context...
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
Exploit likelihood
What each source reports
NVD Score used
6.8
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
- Record
CVE-2007-1701- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-502
- Updated
- 2026-11-02
CVE List No score
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
- Record
CVE-2007-1701- Updated
- 2026-11-02
EUVDEUVD-2007-1695 No score
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
- Record
EUVD-2007-1695- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g5mc-mmqp-q5j8 No score
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context...
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
- Record
GHSA-g5mc-mmqp-q5j8- Weakness
- CWE-502
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
Show 183 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-cliRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-commonRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs |
before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
stronghold-phpRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-develRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-imapRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-ldapRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-manualRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-mysqlRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-odbcRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-pgsqlRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-snmpRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs |
before 0:4.1.2-12 | 0:4.1.2-12 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP < 4.4.5/5.2.1 - '_SESSION' Deserialization Overwrite | 2007-03-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1701 is a medium vulnerability (CVSS 6.8) in Php, published March 27, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.36%, the 95th percentile. No source names a fixed version.
References
securityfocus.com/bid/23120
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034
vupen.com/english/advisories/2007/1991
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506
exchange.xforce.ibmcloud.com/vulnerabilities/33658
security.gentoo.org/glsa/glsa-200705-19.xml
Show 64 moreShow less
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137
vupen.com/english/advisories/2007/2374
secunia.com/advisories/25423
secunia.com/advisories/25850
secunia.com/advisories/25445
php-security.org/MOPB/MOPB-31-2007.html
nvd.nist.gov/vuln/detail/CVE-2007-1701
github.com/advisories/GHSA-g5mc-mmqp-q5j8
access.redhat.com/errata/RHSA-2007:0076
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=228858
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0076.json
access.redhat.com/security/cve/CVE-2007-0906
bugzilla.redhat.com/show_bug.cgi?id=1618280
cve.org/CVERecord?id=CVE-2007-0906
nvd.nist.gov/vuln/detail/CVE-2007-0906
access.redhat.com/security/cve/CVE-2007-0907
bugzilla.redhat.com/show_bug.cgi?id=1618281
cve.org/CVERecord?id=CVE-2007-0907
nvd.nist.gov/vuln/detail/CVE-2007-0907
access.redhat.com/security/cve/CVE-2007-0908
bugzilla.redhat.com/show_bug.cgi?id=1618282
cve.org/CVERecord?id=CVE-2007-0908
nvd.nist.gov/vuln/detail/CVE-2007-0908
access.redhat.com/security/cve/CVE-2007-0909
bugzilla.redhat.com/show_bug.cgi?id=1618283
cve.org/CVERecord?id=CVE-2007-0909
nvd.nist.gov/vuln/detail/CVE-2007-0909
access.redhat.com/security/cve/CVE-2007-0910
bugzilla.redhat.com/show_bug.cgi?id=1618284
cve.org/CVERecord?id=CVE-2007-0910
nvd.nist.gov/vuln/detail/CVE-2007-0910
access.redhat.com/security/cve/CVE-2007-0988
bugzilla.redhat.com/show_bug.cgi?id=1618285
cve.org/CVERecord?id=CVE-2007-0988
nvd.nist.gov/vuln/detail/CVE-2007-0988
access.redhat.com/security/cve/CVE-2007-1380
bugzilla.redhat.com/show_bug.cgi?id=240157
cve.org/CVERecord?id=CVE-2007-1380
nvd.nist.gov/vuln/detail/CVE-2007-1380
access.redhat.com/security/cve/CVE-2007-1701
bugzilla.redhat.com/show_bug.cgi?id=240431
cve.org/CVERecord?id=CVE-2007-1701
access.redhat.com/security/cve/CVE-2007-1825
bugzilla.redhat.com/show_bug.cgi?id=240426
cve.org/CVERecord?id=CVE-2007-1825
nvd.nist.gov/vuln/detail/CVE-2007-1825
access.redhat.com/errata/RHSA-2007:0081
bugzilla.redhat.com/show_bug.cgi?id=229332
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0081.json
access.redhat.com/errata/RHSA-2007:0082
bugzilla.redhat.com/show_bug.cgi?id=229013
bugzilla.redhat.com/show_bug.cgi?id=231597
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0082.json
access.redhat.com/security/cve/CVE-2007-1285
bugzilla.redhat.com/show_bug.cgi?id=1618296
cve.org/CVERecord?id=CVE-2007-1285
nvd.nist.gov/vuln/detail/CVE-2007-1285
access.redhat.com/errata/RHSA-2007:0088
bugzilla.redhat.com/show_bug.cgi?id=229337
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0088.json
access.redhat.com/errata/RHSA-2007:0089
bugzilla.redhat.com/show_bug.cgi?id=229762
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0089.json