Synced 07 Nov 2026 15:45 UTC Account
← All products

CVE-2007-4255

HIGH severity · CVSS 7.5
7.5CVSS HIGH

Summary

Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.

Impact & exploitability

Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)9%

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products we track (1)

PHP

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.