CVE-2007-4652

CVE-2007-4652 describes a local vulnerability in PHP versions prior to 5.2.4, where the session extension could be exploited to bypass open_basedir restrictions. An attacker could achieve this by creating a symlink to a session file, potentially allowing unauthorized access to files outside the intended directory. With a CVSS score of 4.4, this vulnerability has a low attack complexity and requires local access, but could lead to partial confidentiality, integrity, and availability impacts. While exploit code exists on ExploitDB, there is no evidence of active exploitation, Metasploit modules, or significant community discussion, suggesting it is not a widely targeted threat.