Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-3997
HistorySep 04, 2007 - 6:17 p.m.

CVE-2007-3997

2007-09-0418:17:00
CWE-264
[email protected]
web.nvd.nist.gov
47
cve-2007-3997
php
mysql
mysqli
remote code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

JSON

The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE.

Affected configurations

NVD
Node
phpphpRange4.0.0–4.4.8
OR
phpphpRange5.0.0–5.2.4
CPENameOperatorVersion
php:phpphplt4.4.8
php:phpphplt5.2.4

Related

nvd 2
seebug 3
ubuntucve 2
prion 2
cvelist 2
exploitpack 1
redhatcve 2
exploitdb 1
cve 1
f5 2
nessus 3
openvas 7
oraclelinux 1
freebsd 1
gentoo 1
nvd
nvd
CVE-2007-3997
2007-09-04 18:17:00
CVE-2007-4889
2007-09-14 01:17:00
seebug
seebug
PHP <= 4.4.7 / 5.2.3 MySQL/MySQLi Safe Mode Bypass Vulnerability
2014-07-01 00:00:00
PHP &lt;= 4.4.7 / 5.2.3 MySQL/MySQLi Safe Mode Bypass Vulnerability
2007-09-10 00:00:00
PHP MySQL/MySQLi扩展绕过安全限制漏洞
2007-09-05 00:00:00
ubuntucve
ubuntucve
CVE-2007-3997
2007-09-04 00:00:00
CVE-2007-4889
2007-09-14 00:00:00
prion
prion
Design/Logic Flaw
2007-09-04 18:17:00
Design/Logic Flaw
2007-09-14 01:17:00
cvelist
cvelist
CVE-2007-3997
2007-09-04 18:00:00
CVE-2007-4889
2007-09-14 01:00:00
exploitpack
exploitpack
PHP 4.4.75.2.3 - MySQLMySQLi Safe_Mode Bypass
2007-09-10 00:00:00
redhatcve
redhatcve
CVE-2007-3997
2015-10-30 10:13:33
CVE-2007-4889
2015-10-30 09:54:31
exploitdb
exploitdb
PHP 4.4.7/5.2.3 - MySQL/MySQLi &#039;Safe_Mode&#039; Bypass
2007-09-10 00:00:00
cve
cve
CVE-2007-4889
2007-09-14 01:17:00
f5
f5
K31530542 : PHP vulnerabilities CVE-2007-1777, CVE-2007-3997, CVE-2007-4657, CVE-2008-3658, and CVE-2008-3659
2016-10-20 00:00:00
SOL31530542 - PHP vulnerabilities CVE-2007-1777, CVE-2007-3997, CVE-2007-4657, CVE-2008-3658, and CVE-2008-3659
2016-10-20 00:00:00
nessus
nessus
PHP < 4.4.8 Multiple Vulnerabilities
2008-01-03 00:00:00
FreeBSD : php -- multiple vulnerabilities (71d903fc-602d-11dc-898c-001921ab2fa4)
2007-09-14 00:00:00
GLSA-200710-02 : PHP: Multiple vulnerabilities
2007-10-09 00:00:00
openvas
openvas
PHP < 4.4.8 Multiple Vulnerabilities
2012-06-21 00:00:00
PHP < 4.4.8 Multiple Vulnerabilities
2020-08-17 00:00:00
Oracle: Security Advisory (ELSA-2007-0890)
2015-10-08 00:00:00
oraclelinux
oraclelinux
Moderate: php security update
2007-09-20 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2007-08-30 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2007-10-07 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

JSON
Related for CVE-2007-3997
nvd2seebug3ubuntucve2prion2cvelist2exploitpack1redhatcve2exploitdb1cve1f52nessus3openvas7oraclelinux1freebsd1gentoo1