Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-4850

26
FAUCET Score

CVE-2007-4850 describes a vulnerability in the cURL library within PHP versions 5.2.4 and 5.2.5, allowing attackers to bypass safe_mode and open_basedir restrictions. By crafting a file:// request with a null byte sequence, an attacker can read arbitrary files. This medium-severity vulnerability (CVSS 5.0) has publicly available exploit code, as evidenced by an ExploitDB entry, but is not listed on the KEV catalog and shows no active exploitation or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
5.2.4CPE matchmatch criteria
cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*
5.2.5CPE matchmatch criteria
cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
5.58%
Probability of exploitation in next 30 days
EPSS Percentile
92.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-31053 · Jan 23, 2008
This CVE's current EPSS score of 0.0558 is in the 89th percentile among its peer group of 23,705 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2007-4850

php: curl safe mode bypass

Jan 22, 2008

References

cvs.php.net / viewcvs.cgi/php-src/NEWS
Exploit
lists.apple.com / archives/security-announce//2008/Jul/msg00003.html
lists.apple.com / archives/security-announce/2008/Oct/msg00001.html
lists.grok.org.uk / pipermail/full-disclosure/2008-January/059849.html
Exploit
secunia.com / advisories/30048
secunia.com / advisories/30411
secunia.com / advisories/31200
secunia.com / advisories/31326
secunia.com / advisories/32222
securityreason.com / achievement_securityalert/51
Exploit
securityreason.com / securityalert/3562
exchange.xforce.ibmcloud.com / vulnerabilities/39852
exchange.xforce.ibmcloud.com / vulnerabilities/42134
support.apple.com / kb/HT3216
wiki.rpath.com / wiki/Advisories:rPSA-2008-0178
mandriva.com / security/advisories
mandriva.com / security/advisories
openwall.com / lists/oss-security/2008/05/02/2
php.net / ChangeLog-5.php
securityfocus.com / archive/1/486856/100/0/threaded
securityfocus.com / archive/1/492671/100/0/threaded
securityfocus.com / bid/27413
securityfocus.com / bid/29009
securityfocus.com / bid/31681
ubuntu.com / usn/usn-628-1
vupen.com / english/advisories/2008/1412
vupen.com / english/advisories/2008/2268
vupen.com / english/advisories/2008/2780