What’s Vulnerable › Vulnerabilities
CVE-2007-4596
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 8.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2007-08-30 · updated 2026-06-16
- Weakness: CWE-94
Description
The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments.
Affected products
- PHP: all versions
References
Get alerted when CVE-2007-4596 or the next vulnerability affects your stack