Vulnetix
Try Vulnetix Request Demo
CVE-2001-1246 PUBLISHED

Reported by mitre · Published June 25, 2002

PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a, n/a, n/a

Timeline

References

Open in Interactive Console →