CVE-2007-1412: PHP

High severity, CVSS 7.8. EPSS: 6.2% chance of exploitation in the next 30 days.

The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument.

Affected products

• PHP PHP: version 4.4.6 only

Published 2007-03-12. Last modified 2026-06-16.