Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1452. PoCs published by Stefan Esser.
AI-analyzed exploit summary This PoC exploits CVE-2007-1452 by bypassing PHP's ext/filter FDF POST filter to inject malicious data (XSS and SQLi payloads) via crafted FDF content. It demonstrates how the filter can be evaded by sending data in FDF format instead of standard POST.
Description
The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.
Exploits (1)
This PoC exploits CVE-2007-1452 by bypassing PHP's ext/filter FDF POST filter to inject malicious data (XSS and SQLi payloads) via crafted FDF content. It demonstrates how the filter can be evaded by sending data in FDF format instead of standard POST.