CVE-2007-0910

12 documents6 sources
Severity
10.0CRITICAL
EPSS
8.1%
top 7.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 13
Latest updateMay 3

Description

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

NVDphp/php5.2.0+66
NVDtrustix/secure_linux2.2, 3.0+1

Patches

🔴Vulnerability Details

2
GHSA
GHSA-jmgr-hgq4-h5rf: Unspecified vulnerability in PHP before 52022-05-03
CVEList
CVE-2007-0910: Unspecified vulnerability in PHP before 52007-02-13

📋Vendor Advisories

3
Ubuntu
PHP vulnerabilities2007-02-22
Red Hat
security flaw2007-02-14
Red Hat
php session extension global variable clobber2007-02-14

💬Community

6
Bugzilla
CVE-2007-0910 security flaw2018-08-16
Bugzilla
CVE-2007-0906 PHP security issues (CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988)2007-02-23
Bugzilla
CVE-2007-0906 PHP security issues (CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988)2007-02-20
Bugzilla
CVE-2007-0906 PHP security issues (CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988)2007-02-20
Bugzilla
CVE-2007-0906 PHP security issues (CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988)2007-02-16
CVE-2007-0910 (CRITICAL CVSS 10) | Unspecified vulnerability in PHP be | cvebase.io