CVE-2007-5898: Medium severity PHP PHP vulnerability
Published Nov 20, 2007
·Updated
The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.
Affected Software
1 affected component
PHP PHP<=5.2.4
Remediation
Patch Available
Event History
Nov 20, 2007
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5898?
CVE-2007-5898 is considered to have an unknown severity due to its potential impact and attack vectors.
2
How do I fix CVE-2007-5898?
To fix CVE-2007-5898, upgrade your PHP version to 5.2.5 or later.
3
What functions are affected by CVE-2007-5898?
The functions affected by CVE-2007-5898 are htmlentities and htmlspecialchars in PHP versions before 5.2.5.
4
Could CVE-2007-5898 allow for security risks?
Yes, CVE-2007-5898 may allow for potential security risks due to the handling of partial multibyte sequences.
5
Which versions of PHP are affected by CVE-2007-5898?
CVE-2007-5898 affects PHP versions before 5.2.5.