EDB-29784
functionalPHP 5.2.1 - Folded Mail Headers Email Header Injection
view exploit source exploit_dbverifiedtype remoteauthor Stefan Esserpublished 2007-11-26catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-1717US | medium5.0 | Exploit | ||
The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might allow context-dependent attackers to pre… | ||||
| CVE-2007-1718US | high7.8 | Exploit | ||
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan