CVE-2007-1701 Deserialization in n/a
Attackers can execute arbitrary code by sending crafted session data when register_globals is enabled in vulnerable PHP versions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-1701?
CVE-2007-1701 is a medium-severity unsafe deserialization vulnerability in Php Php, published on 27 Mar 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
Weakness: CWE-502
Which versions are affected by CVE-2007-1701?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2007-1701?
Upgrade to a fixed version.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2007-1701 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-1701 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-g5mc-mmqp-q5j8.