CVE-2007-5899
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...
CVE-2007-5899 is a medium vulnerability (CVSS 4.3) in Php, published November 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.39%, the 88th percentile. Fixed in php5 5.2.0-8+etch9.
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.
Exploit likelihood
What each source reports
NVD Score used
4.3
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.
- Record
CVE-2007-5899- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.
- Record
CVE-2007-5899- Updated
- 2026-11-02
EUVDEUVD-2007-5869 No score
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.
- Record
EUVD-2007-5869- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2rqw-x4fp-36cv No score
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.
- Record
GHSA-2rqw-x4fp-36cv- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:4.0 |
before 5.2.0-8+etch9, plus listed versions 5.2.0-8+etch15.2.0-8+etch35.2.0-8+etch45.2.0-8+etch5~pu15.2.0-8+etch65.2.0-8+etch75.2.0-8+etch85.2.0-8+etch9~bpo31+1 |
5.2.0-8+etch9 |
httpdRed Hat:rhel_application_stack:2 |
before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 |
before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 |
before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
mod_jkRed Hat:rhel_application_stack:2 |
before 0:1.2.26-1.el5s2 | 0:1.2.26-1.el5s2 |
mod_jk-ap20Red Hat:rhel_application_stack:2 |
before 0:1.2.26-1.el5s2 | 0:1.2.26-1.el5s2 |
mod_jk-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.2.26-1.el5s2 | 0:1.2.26-1.el5s2 |
mod_perlRed Hat:rhel_application_stack:2 |
before 0:2.0.4-3.el5s2 | 0:2.0.4-3.el5s2 |
mod_perl-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.0.4-3.el5s2 | 0:2.0.4-3.el5s2 |
Show 244 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mod_perl-develRed Hat:rhel_application_stack:2 |
before 0:2.0.4-3.el5s2 | 0:2.0.4-3.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 |
before 1:2.2.8-1.el5s2 | 1:2.2.8-1.el5s2 |
mysqlRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-connector-odbcRed Hat:rhel_application_stack:2 |
before 0:3.51.24r1071-1.el5s2 | 0:3.51.24r1071-1.el5s2 |
mysql-connector-odbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:3.51.24r1071-1.el5s2 | 0:3.51.24r1071-1.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-jdbcRed Hat:rhel_application_stack:2 |
before 0:5.0.8-1jpp.1.el5s2 | 0:5.0.8-1jpp.1.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 |
before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 |
before 0:4.006-1.el5s2 | 0:4.006-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 |
before 0:4.006-1.el5s2 | 0:4.006-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 |
before 0:1.604-1.el5s2 | 0:1.604-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.604-1.el5s2 | 0:1.604-1.el5s2 |
phpRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-cliRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-commonRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-develRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-gdRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-imapRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-soapRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 |
before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 |
before 0:8.2.508-1jpp.el5s2 | 0:8.2.508-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.508-1jpp.el5s2 | 0:8.2.508-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-odbcRed Hat:rhel_application_stack:2 |
before 0:08.02.0500-1.el5s2 | 0:08.02.0500-1.el5s2 |
postgresql-odbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:08.02.0500-1.el5s2 | 0:08.02.0500-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 |
before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresqlclient81Red Hat:rhel_application_stack:2 |
before 0:8.1.11-1.el5s2 | 0:8.1.11-1.el5s2 |
postgresqlclient81-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.1.11-1.el5s2 | 0:8.1.11-1.el5s2 |
unixODBCRed Hat:rhel_application_stack:2 |
before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
unixODBC-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
unixODBC-develRed Hat:rhel_application_stack:2 |
before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
unixODBC-kdeRed Hat:rhel_application_stack:2 |
before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
phpRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
phpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-develRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-imapRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-ldapRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-manualRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-mysqlRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-odbcRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-pgsqlRed Hat:enterprise_linux:2.1::as |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
phpRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-develRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-imapRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-ldapRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-manualRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-mysqlRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-odbcRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-pgsqlRed Hat:enterprise_linux:2.1::aw |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
phpRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-develRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-imapRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-ldapRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-manualRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-mysqlRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-odbcRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-pgsqlRed Hat:enterprise_linux:2.1::es |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
phpRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-develRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-imapRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-ldapRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-manualRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-mysqlRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-odbcRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
php-pgsqlRed Hat:enterprise_linux:2.1::ws |
before 0:4.1.2-2.20 | 0:4.1.2-2.20 |
phpRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-bcmathRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-cliRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-commonRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-dbaRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-debuginfoRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-develRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-gdRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-imapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-ldapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-mbstringRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-mysqlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-ncursesRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-odbcRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-pdoRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-pgsqlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-snmpRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-soapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-xmlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-xmlrpcRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, facts, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
osvdb.org/38918
php.net/ChangeLog-5.php
launchpad.net/bugs/173043
redhat.com/support/errata/RHSA-2008-0546.html
redhat.com/archives/fedora-package-announce/2008-June/msg00773.html
bugs.php.net/bug.php?id=42869
Show 79 moreShow less
issues.rpath.com/browse/RPL-1943
secunia.com/advisories/30828
debian.org/security/2008/dsa-1444
redhat.com/support/errata/RHSA-2008-0582.html
ubuntu.com/usn/usn-628-1
redhat.com/support/errata/RHSA-2008-0545.html
secunia.com/advisories/27864
secunia.com/advisories/31124
secunia.com/advisories/31119
secunia.com/advisories/30040
php.net/releases/5_2_5.php
secunia.com/advisories/27659
secunia.com/advisories/31200
usn.ubuntu.com/549-1
securityfocus.com/archive/1/491693/100/0/threaded
redhat.com/support/errata/RHSA-2008-0544.html
secunia.com/advisories/28249
mandriva.com/security/advisories?name=MDVSA-2008:125
wiki.rpath.com/wiki/Advisories:rPSA-2007-0242
redhat.com/support/errata/RHSA-2008-0505.html
ubuntu.com/usn/usn-549-2
mandriva.com/security/advisories?name=MDVSA-2008:126
mandriva.com/security/advisories?name=MDVSA-2008:127
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11211
nvd.nist.gov/vuln/detail/CVE-2007-5899
github.com/advisories/GHSA-2rqw-x4fp-36cv
access.redhat.com/errata/RHSA-2008:0505
access.redhat.com/security/updates/classification
redhat.com/docs/en-US/Red_Hat_Application_Stack/2.1/html-single/Release_Notes
bugzilla.redhat.com/show_bug.cgi?id=285881
bugzilla.redhat.com/show_bug.cgi?id=382411
bugzilla.redhat.com/show_bug.cgi?id=382431
bugzilla.redhat.com/show_bug.cgi?id=445003
bugzilla.redhat.com/show_bug.cgi?id=445006
bugzilla.redhat.com/show_bug.cgi?id=445222
bugzilla.redhat.com/show_bug.cgi?id=445684
bugzilla.redhat.com/show_bug.cgi?id=445685
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0505.json
access.redhat.com/security/cve/CVE-2007-4782
cve.org/CVERecord?id=CVE-2007-4782
nvd.nist.gov/vuln/detail/CVE-2007-4782
access.redhat.com/security/cve/CVE-2007-5898
cve.org/CVERecord?id=CVE-2007-5898
nvd.nist.gov/vuln/detail/CVE-2007-5898
access.redhat.com/security/cve/CVE-2007-5899
cve.org/CVERecord?id=CVE-2007-5899
access.redhat.com/security/cve/CVE-2008-0599
cve.org/CVERecord?id=CVE-2008-0599
nvd.nist.gov/vuln/detail/CVE-2008-0599
access.redhat.com/security/cve/CVE-2008-2051
cve.org/CVERecord?id=CVE-2008-2051
nvd.nist.gov/vuln/detail/CVE-2008-2051
access.redhat.com/security/cve/CVE-2008-2079
cve.org/CVERecord?id=CVE-2008-2079
nvd.nist.gov/vuln/detail/CVE-2008-2079
access.redhat.com/security/cve/CVE-2008-2107
cve.org/CVERecord?id=CVE-2008-2107
nvd.nist.gov/vuln/detail/CVE-2008-2107
access.redhat.com/security/cve/CVE-2008-2108
cve.org/CVERecord?id=CVE-2008-2108
nvd.nist.gov/vuln/detail/CVE-2008-2108
access.redhat.com/errata/RHSA-2008:0544
redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0544.json
access.redhat.com/errata/RHSA-2008:0545
bugzilla.redhat.com/show_bug.cgi?id=263501
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0545.json
access.redhat.com/errata/RHSA-2008:0546
bugzilla.redhat.com/show_bug.cgi?id=315881
bugzilla.redhat.com/show_bug.cgi?id=383371
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0546.json
access.redhat.com/security/cve/CVE-2006-7228
cve.org/CVERecord?id=CVE-2006-7228
nvd.nist.gov/vuln/detail/CVE-2006-7228
access.redhat.com/security/cve/CVE-2007-1660
cve.org/CVERecord?id=CVE-2007-1660
nvd.nist.gov/vuln/detail/CVE-2007-1660
access.redhat.com/errata/RHSA-2008:0582
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0582.json