CVE-2007-1412

CVE-2007-1412 describes a sensitive information disclosure vulnerability in the cpdf_open function of the ClibPDF (cpdf) extension in PHP 4.4.6. Attackers can exploit this by providing a long string as the second argument, leading to the disclosure of script source code. This vulnerability carries a CVSS score of 7.8, indicating high severity due to its network-based attack vector and complete confidentiality impact without requiring authentication. While the EPSS score is low, its FAUCET Risk Score is high at 91/100. Exploit intelligence indicates that public exploit code exists on ExploitDB, specifically EDB-3442, demonstrating local source code disclosure. There is no evidence of active exploitation, Metasploit or Nuclei modules, nor significant community discussion or media coverage.