Description

The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument.

Remediation

References

CVE-2007-1412

Related Vulnerabilities

TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3661)

ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12170)

Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2025-61795)

WordPress Plugin Easy Social Icons Multiple Vulnerabilities (1.2.2)

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13587)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2007-1412