cve.bz

CVE-2007-4850

no score yetEPSS 5.6%

php php: no CVSS score yet. EPSS 5.6% chance of exploitation in the next 30 days.

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.
EPSS
5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE
CWE-264
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON