Main
Vulnerability Database
Exploits
ID:11646 - Exploit for Input validation error in PHP - CVE-2007-3806
ID:11646 - Exploit for Input validation error in PHP - CVE-2007-3806
Published: June 13, 2025
Vulnerability identifier: #VU110387
Vulnerability risk: Medium
CVE-ID: CVE-2007-3806
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.
Remediation
Install update from vendor's website.