CVE-2007-4889: The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir r...

Security readout for executives and security teams

This CVE affects PHP 5.2.4 and earlier when using the MySQL extension. An attacker may bypass PHP’s safe_mode and open_basedir file restrictions through MySQL file-related functions. For executives, the concern is legacy PHP applications that relied on those controls for isolation or file access containment. Exposure is most likely in old PHP 5.2.4-or-earlier applications using the PHP MySQL extension, especially where application behavior can trigger MySQL file operations. The bundle does not identify specific vendors, distributions, CPEs, or current affected products. Treat this as a legacy technology risk. It is old, not listed in KEV, and lacks scoring in the bundle, but any remaining affected system may defeat file-access boundaries that teams may wrongly assume still protect sensitive data. Mitigation focus: Identify and retire PHP 5.2.4 or earlier deployments using the MySQL extension.; Check PHP and operating-system vendor guidance for the fixed or supported upgrade path.; Do not rely on safe_mode or open_basedir as the only containment control..

Prepared

Jun 29, 2026, 03:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.