NetSight
IP …
medium5.0

CVE-2006-7087

CRLF injection vulnerability in the mail function in Dotdeb PHP before 5.2.0 Rev 3 allows remote attackers to bypass the protection scheme and inject arbitrary…

Impact

CRLF injection vulnerability in the mail function in Dotdeb PHP before 5.2.0 Rev 3 allows remote attackers to bypass the protection scheme and inject arbitrary email headers via CRLF sequences in the query string, which is processed via the PHP_SELF variable.

Affected products

VendorProductAffected versions
DotdebDotdeb Php
Versions 4.4, 4.4.3, 4.4.4, 5.0, 5.1, 5.2

References