Vulnerability in Php

CVE-2007-1452

The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.

EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.0, 5.0.0, 5.0.1
  • N/a — versions n/a

References