CVE-2007-1452

Description

The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.

References

http://www.securityfocus.com/bid/22906

http://www.php-security.org/MOPB/MOPB-17-2007.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3