Main
Vulnerability Database
Exploits
ID:11570 - Exploit for Input validation error in PHP - CVE-2007-1484
ID:11570 - Exploit for Input validation error in PHP - CVE-2007-1484
Published: June 12, 2025
Vulnerability identifier: #VU110435
Vulnerability risk: Low
CVE-ID: CVE-2007-1484
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to read and manipulate data.
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called.
Remediation
Install update from vendor's website.