CVE-2007-4596: PHP

High severity, CVSS 7.5. EPSS: 7.8% chance of exploitation in the next 30 days.

The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments.

Affected products

• PHP PHP: affected versions not specified

Published 2007-08-30. Last modified 2026-06-16.