Main
Vulnerability Database
Exploits
ID:11535 - Exploit for Input validation error in PHP - CVE-2007-1835
ID:11535 - Exploit for Input validation error in PHP - CVE-2007-1835
Published: June 10, 2025
Vulnerability identifier: #VU110416
Vulnerability risk: Low
CVE-ID: CVE-2007-1835
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to read and manipulate data.
PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR default after checking the restrictions, which allows local users to bypass open_basedir restrictions.
Remediation
Install update from vendor's website.