5.1
CVSSv2

CVE-2007-2510

Published: 09/05/2007 Updated: 30/10/2018
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 454
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the make_http_soap_request function in PHP prior to 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 4.0.0

php php 4.0.1

php php 4.0.4

php php 4.0.5

php php 4.1.1

php php 4.1.2

php php 4.3.11

php php 4.3.2

php php 4.3.9

php php 4.4.0

php php 5.0.0

php php 5.0.1

php php 5.0.2

php php 5.1.0

php php 5.1.1

php php 5.2.1

php php 4.0.3

php php 4.0.7

php php 4.1.0

php php 4.3.1

php php 4.3.10

php php 4.3.7

php php 4.3.8

php php 4.4.5

php php 4.4.6

php php 5.0

php php 5.1.6

php php 5.2.0

php php 4.0.6

php php 4.2.0

php php 4.2.1

php php 4.2.2

php php 4.3.3

php php 4.3.4

php php 4.4.1

php php 4.4.2

php php 5.0.3

php php 5.0.4

php php 5.1.2

php php 5.1.3

php php 4.0.2

php php 4.2.3

php php 4.3.0

php php 4.3.5

php php 4.3.6

php php 4.4.3

php php 4.4.4

php php 5.0.5

php php 5.1.4

php php 5.1.5

Vendor Advisories

A flaw was discovered in the FTP command handler in PHP Commands were not correctly filtered for control characters An attacker could issue arbitrary FTP commands using specially crafted arguments (CVE-2007-2509) ...
Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2509 It was discovered that missing input sanitising inside the ftp extension permits an ...