Main
Vulnerability Database
Exploits
ID:11574 - Exploit for Input validation error in PHP - CVE-2007-1584
ID:11574 - Exploit for Input validation error in PHP - CVE-2007-1584
Published: June 12, 2025
Vulnerability identifier: #VU110431
Vulnerability risk: Medium
CVE-ID: CVE-2007-1584
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write ' ' characters in whitespace that precedes the string.
Remediation
Install update from vendor's website.