CVE-2007-3578: Phpids

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remote attackers to inject arbitrary web script.

Affected products

• Phpids Phpids: any version

Published 2007-07-05. Last modified 2026-06-16.