Description

PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".

Remediation

References

CVE-2007-1701

Related Vulnerabilities

WordPress Plugin Multi Step Form Multiple Cross-Site Scripting Vulnerabilities (1.2.5)

Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-3719)

WordPress Plugin WPtouch Cross-Site Scripting (4.3.42)

WordPress Plugin Autoptimize Cross-Site Scripting (3.1.0)

Internet Information Services Other Vulnerability (CVE-1999-0449)

Severity

Medium

Classification

CVE-2007-1701 CWE-502

Tags

Missing Update Known Vulnerabilities