Description

The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.

Remediation

References

CVE-2007-1452

Related Vulnerabilities

WordPress Plugin Import any XML or CSV File to WordPress Cross-Site Scripting (3.6.2)

Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51488)

WordPress Plugin Check & Log Email Cross-Site Scripting (0.5.1)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6145)

WordPress Plugin FireStorm Professional Real Estate 'id' Parameter SQL Injection (2.06.03)

Severity

Medium

Classification

CVE-2007-1452

Tags

Missing Update Known Vulnerabilities