CVE-2007-1886

MEDIUM · CVSS 6.8 EPSS 1.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-04-06 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-1886

Severity

MEDIUM

CVSS

6.8

EPSS

1.69%

Original Filing — NVD Description

Integer overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow."