Description

Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.

Remediation

References

CVE-2007-4670

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5488)

WordPress Plugin Magic Fields Arbitrary File Upload (1.6.3.2)

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.13.4)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11112)

Java Unspesificed Vulnerability (CVE-2019-2786)

Severity

Medium

Classification

CVE-2007-4670

Tags

Missing Update Known Vulnerabilities