The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable i…

Published 19 y ago 2007-03-21 · modified 4 mo ago 2026-06-16 · JSON

CVSS

6.8

v2.0 · NVD

CISA KEV

not known exploited

EPSS

5.4%

percentile 93%

Public exploits

Exploit-DB

The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation.

Exploit prediction (EPSS)

5.44% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.

Exploits and detections

EDB-29752 PHP 5.1.6 - Mb_Parse_Str Function Register_Globals Activation · remote · 2007-03-19

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	6.8	`AV:N/AC:M/Au:N/C:P/I:P/A:P`

Classification

Technology feeds: PHP (RSS, critical only)

References

vupen.com /english/advisories/2007/2732 · vdb-entry, x_refsource_VUPEN, x_transferred
secunia.com /advisories/25056 · third-party-advisory, x_refsource_SECUNIA, x_transferred
debian.org /security/2007/dsa-1283 · vendor-advisory, x_refsource_DEBIAN, x_transferred
securityfocus.com /archive/1/466166/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
lists.apple.com /archives/security-announce//2007/Jul/msg00004.html · vendor-advisory, x_refsource_APPLE, x_transferred
security.gentoo.org /glsa/glsa-200705-19.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10245 · vdb-entry, signature, x_refsource_OVAL, x_transferred
redhat.com /support/errata/RHSA-2007-0162.html · vendor-advisory, x_refsource_REDHAT, x_transferred
securityfocus.com /bid/23016 · vdb-entry, x_refsource_BID, x_transferred
us2.php.net /releases/4_4_7.php · x_refsource_CONFIRM, x_transferred
secunia.com /advisories/25062 · third-party-advisory, x_refsource_SECUNIA, x_transferred
mandriva.com /security/advisories?name=MDKSA-2007:090 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
ubuntu.com /usn/usn-455-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
secunia.com /advisories/24909 · third-party-advisory, x_refsource_SECUNIA, x_transferred
secunia.com /advisories/24945 · third-party-advisory, x_refsource_SECUNIA, x_transferred
issues.rpath.com /browse/RPL-1268 · x_refsource_CONFIRM, x_transferred
us2.php.net /releases/5_2_2.php · x_refsource_CONFIRM, x_transferred
docs.info.apple.com /article.html?artnum=306172 · x_refsource_CONFIRM, x_transferred
secunia.com /advisories/24924 · third-party-advisory, x_refsource_SECUNIA, x_transferred
rhn.redhat.com /errata/RHSA-2007-0155.html · vendor-advisory, x_refsource_REDHAT, x_transferred
secunia.com /advisories/24965 · third-party-advisory, x_refsource_SECUNIA, x_transferred
securityfocus.com /bid/25159 · vdb-entry, x_refsource_BID, x_transferred
mandriva.com /security/advisories?name=MDKSA-2007:089 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
secunia.com /advisories/25445 · third-party-advisory, x_refsource_SECUNIA, x_transferred
php-security.org /MOPB/MOPB-26-2007.html · x_refsource_MISC, x_transferred
secunia.com /advisories/25057 · third-party-advisory, x_refsource_SECUNIA, x_transferred
novell.com /linux/security/advisories/2007_32_php.html · vendor-advisory, x_refsource_SUSE, x_transferred
mandriva.com /security/advisories?name=MDKSA-2007:088 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
secunia.com /advisories/26235 · third-party-advisory, x_refsource_SECUNIA, x_transferred
redhat.com /support/errata/RHSA-2007-0153.html · vendor-advisory, x_refsource_REDHAT, x_transferred

Sources

CVE List: CVE-2007-1583
NVD: CVE-2007-1583

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.