What’s Vulnerable › Vulnerabilities

CVE-2007-5447

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-10-14 · updated 2026-06-16
• Weakness: CWE-264

Description

ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncube_read_file function.

Affected products

• Ioncube Php Encoder: 6.5
• PHP: 5.2.4

References

• http://osvdb.org/41708
• http://secunia.com/advisories/27178
• http://www.securityfocus.com/bid/26024
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37227
• https://www.exploit-db.com/exploits/4517
• http://osvdb.org/41708
• http://secunia.com/advisories/27178
• http://www.securityfocus.com/bid/26024
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37227
• https://www.exploit-db.com/exploits/4517

Get alerted when CVE-2007-5447 or the next vulnerability affects your stack