CVE-2007-1396 Other in n/a
Remote attackers can overwrite PHP superglobals via import_request_variables, spoofing IP and Referer data, requiring an upgrade to fix.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-1396?
CVE-2007-1396 is a medium-severity vulnerability in Php Php, published on 10 Mar 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritten, which allows remote attackers to spoof source IP address and Referer data, and have other unspecified impact. NOTE: it could be argued that this is a design limitation of PHP and that only the misuse of this feature, i.e. implementation bugs in applications, should be included in CVE. However, it has been fixed by the vendor.
Which versions are affected by CVE-2007-1396?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2007-1396?
No fix has been published for CVE-2007-1396 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-1396 being exploited?
There is no known exploitation of CVE-2007-1396 in the wild and no public exploit code.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-m5h9-x7c3-7jg4.