Main
Vulnerability Database
Exploits
ID:11528 - Exploit for Input validation error in PHP - CVE-2007-1452
ID:11528 - Exploit for Input validation error in PHP - CVE-2007-1452
Published: June 10, 2025
Vulnerability identifier: #VU110436
Vulnerability risk: Medium
CVE-ID: CVE-2007-1452
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to corrupt data.
The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.
Remediation
Install update from vendor's website.