CVE-2007-3799
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...
4.3 MediumPublic exploitFix available
CVE-2007-3799 is a medium vulnerability (CVSS 4.3) in Php, published July 16, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.92%, the 94th percentile. Fixed in php5 5.2.0-8+etch9.
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.
Exploit likelihood
7.92%Down 4.6 points since Feb 4, 2022
What each source reports
NVD Score used
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.
- Record
CVE-2007-3799- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.
- Record
CVE-2007-3799- Updated
- 2026-11-02
EUVDEUVD-2007-3783 No score
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.
- Record
EUVD-2007-3783- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwm7-8cp9-2h4f No score
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.
- Record
GHSA-wwm7-8cp9-2h4f- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:4.0 |
before 5.2.0-8+etch9, plus listed versions 5.2.0-8+etch15.2.0-8+etch35.2.0-8+etch45.2.0-8+etch5~pu15.2.0-8+etch65.2.0-8+etch75.2.0-8+etch85.2.0-8+etch9~bpo31+1 |
5.2.0-8+etch9 |
php4Debian:4.0 |
before 6:4.4.4-8+etch6, plus listed versions 6:4.4.4-8+etch16:4.4.4-8+etch26:4.4.4-8+etch36:4.4.4-8+etch4 |
6:4.4.4-8+etch6 |
php5Debian:5.0 |
before 5.2.3-1+lenny1 | 5.2.3-1+lenny1 |
phpRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
Show 197 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-pgsqlRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
phpRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-bcmathRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-cliRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-commonRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-dbaRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-debuginfoRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-develRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-gdRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-imapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-ldapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-mbstringRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-mysqlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-ncursesRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-odbcRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-pdoRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-pgsqlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-snmpRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-soapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-xmlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-xmlrpcRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
phpRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-cliRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-commonRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-develRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-gdRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-imapRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-soapRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 |
before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP 5.2.3 - EXT/Session HTTP Response Header Injection | 2007-06-04 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
secunia.com/advisories/30288
launchpad.net/bugs/173043
redhat.com/support/errata/RHSA-2007-0888.html
securityfocus.com/bid/24268
Show 79 moreShow less
debian.org/security/2008/dsa-1444
vupen.com/english/advisories/2008/0924/references
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
rhn.redhat.com/errata/RHSA-2007-0889.html
usn.ubuntu.com/549-1
issues.rpath.com/browse/RPL-1693
support.avaya.com/elmodocs2/security/ASA-2007-449.htm
osvdb.org/36855
php-security.org/MOPB/PMOPB-46-2007.html
docs.info.apple.com/article.html?artnum=307562
mandriva.com/security/advisories?name=MDKSA-2007:187
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9792
ubuntu.com/usn/usn-549-2
novell.com/linux/security/advisories/2007_15_sr.html
nvd.nist.gov/vuln/detail/CVE-2007-3799
github.com/advisories/GHSA-wwm7-8cp9-2h4f
access.redhat.com/errata/RHSA-2007:0888
bugzilla.redhat.com/show_bug.cgi?id=239014
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0888.json
cve.org/CVERecord?id=CVE-2007-2509