ID:11552 - Exploit for Code Injection in PHP - CVE-2007-4596
Published: June 11, 2025
Vulnerability identifier: #VU110379
Vulnerability risk: Medium
CVE-ID: CVE-2007-4596
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments.
Remediation
Install update from vendor's website.