CVE-2007-4652

The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.

We have discovered 115,776 live websites that are affected by CVE-2007-4652.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains115,776 live websites (1.67% of PHP install base)
Vulnerable Versions
  • from 0 through 5.2.4
Vulnerable Versions Count17 versions ( 3.21% of all versions)



Details

  • Published - Sep 4, 2007
  • Updated - Aug 7, 2024

Website Distribution by Country

Number of websites using CVE-2007-4652
United States5,757 websites


Taiwan80,132 websites
Korea, South4,696 websites
Germany4,009 websites
Japan3,554 websites
France2,696 websites
Russia1,938 websites
Italy1,020 websites
Czech Republic871 websites

Website Distribution by TLD

Number of websites using CVE-2007-4652
.com78,173 websites
.info4,501 websites
.de3,263 websites
.net3,096 websites
.ru1,723 websites
.org1,548 websites
.jp1,098 websites
.cz767 websites
.co.jp722 websites
.it718 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2007-4652

Top websites that are affected by CVE-2007-4652. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***.tw Taiwan*,***
**********.*****.de Germany*,***
****.info France**,***
******.com Taiwan**,***
******.com Taiwan**,***
****.com Taiwan**,***
*****.com Taiwan**,***
******.com Taiwan**,***
*****.com Taiwan**,***
*****.com Taiwan**,***
See full domain list

FAQ

A total of 115,776 websites have been identified as vulnerable to CVE-2007-4652, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2007-4652 vulnerability.
PHP versions up to and including 5.2.4 are vulnerable to CVE-2007-4652.