CVE-2007-1521

Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.

We have discovered 88,830 live websites that are affected by CVE-2007-1521.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains88,830 live websites (1.28% of PHP install base)
Vulnerable Versions
  • from 5 through 5.2.2
Vulnerable Versions Count14 versions ( 2.65% of all versions)



Details

  • Published - Mar 20, 2007
  • Updated - Aug 7, 2024

Website Distribution by Country

Number of websites using CVE-2007-1521
United States1,405 websites


Taiwan78,957 websites
Germany1,792 websites
Japan1,588 websites
Korea, South521 websites
Russia404 websites
Hungary348 websites
Bulgaria219 websites
Italy218 websites

Website Distribution by TLD

Number of websites using CVE-2007-1521
.com68,138 websites
.info4,256 websites
.de1,562 websites
.net856 websites
.jp603 websites
.ru367 websites
.org366 websites
.co.jp334 websites
.it172 websites
.cz168 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2007-1521

Top websites that are affected by CVE-2007-1521. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***.tw Taiwan*,***
******.com Taiwan**,***
****.com Taiwan**,***
*****.com Taiwan**,***
******.com Taiwan**,***
*****.com Taiwan**,***
*****.com Taiwan**,***
*****.com Taiwan**,***
******.com Taiwan**,***
*****.com Taiwan**,***
See full domain list

FAQ

A total of 88,830 websites have been identified as vulnerable to CVE-2007-1521, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2007-1521 vulnerability.
PHP versions up to 5.2.2 are vulnerable to CVE-2007-1521.
CVE-2007-1521 is resolved in version 5.2.2 of PHP.

References