EUVD-2007-1454

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerabilities in PHP's zip URL wrapper allow remote reading of ZIP archives outside directories

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	PHP 4.x < 4.4.7 / 5.x < 5.2.2 Multiple Vulnerabilities	4 May 200700:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2007-007)	2 Aug 200700:00	–	nessus
Tenable Nessus	PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities	4 May 200700:00	–	nessus
Tenable Nessus	openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-3289)	17 Oct 200700:00	–	nessus
CVE	CVE-2007-1460	14 Mar 200718:00	–	cve
Cvelist	CVE-2007-1460	14 Mar 200718:00	–	cvelist
NVD	CVE-2007-1460	14 Mar 200718:19	–	nvd
OpenVAS	SuSE Update for php4,php5 SUSE-SA:2007:032	28 Jan 200900:00	–	openvas
Prion	Code injection	14 Mar 200718:19	–	prion
RedhatCVE	CVE-2007-1460	30 Oct 201509:48	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "00d45490-67f5-39a1-8ec5-c498e19be928",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "865bc579-ca43-3b58-afb6-8f3b39d293a2",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2007-1460.html
vupen	www.vupen.com/english/advisories/2007/2732
secunia	www.secunia.com/advisories/25056
lists	www.lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
us2	www.us2.php.net/releases/4_4_7.php
us2	www.us2.php.net/releases/5_2_2.php
docs	www.docs.info.apple.com/article.html
securityfocus	www.securityfocus.com/bid/25159
php-security	www.php-security.org/MOPB/MOPB-20-2007.html
novell	www.novell.com/linux/security/advisories/2007_32_php.html

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

EPSS0.01192