CVE-2007-1461

The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not implement safemode or open_basedir checks, which allows remote attackers to read bzip2 archives located outside of the intended directories.

We have discovered 88,830 live websites that are affected by CVE-2007-1461.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains88,830 live websites (1.28% of PHP install base)
Vulnerable Versions
  • from 5 through 5.2.2
Vulnerable Versions Count14 versions ( 2.65% of all versions)



Details

  • Published - Mar 14, 2007
  • Updated - Aug 7, 2024

Website Distribution by Country

Number of websites using CVE-2007-1461
United States1,405 websites


Taiwan78,957 websites
Germany1,792 websites
Japan1,588 websites
Korea, South521 websites
Russia404 websites
Hungary348 websites
Bulgaria219 websites
Italy218 websites

Website Distribution by TLD

Number of websites using CVE-2007-1461
.com68,138 websites
.info4,256 websites
.de1,562 websites
.net856 websites
.jp603 websites
.ru367 websites
.org366 websites
.co.jp334 websites
.it172 websites
.cz168 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2007-1461

Top websites that are affected by CVE-2007-1461. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***.tw Taiwan*,***
******.com Taiwan**,***
****.com Taiwan**,***
*****.com Taiwan**,***
******.com Taiwan**,***
*****.com Taiwan**,***
*****.com Taiwan**,***
*****.com Taiwan**,***
******.com Taiwan**,***
*****.com Taiwan**,***
See full domain list

FAQ

A total of 88,830 websites have been identified as vulnerable to CVE-2007-1461, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2007-1461 vulnerability.
PHP versions up to 5.2.2 are vulnerable to CVE-2007-1461.
CVE-2007-1461 is resolved in version 5.2.2 of PHP.