CVE-2007-4596 The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerabilit...
HighCVSS 7.5
EPSS 8.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | All versions | No fix listed |
References
- 4314 exploit third-party-advisory vdb-entry