CVE-2007-1452

The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-03-14

Last modified

2024-09-16

Affected products

• Php (Php)

References

• http://www.php-security.org/MOPB/MOPB-17-2007.html
• http://www.securityfocus.com/bid/22906