Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 30/06/2001 Updated: 14/02/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

PHP 4.0.5 up to and including 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote malicious users to execute arbitrary commands via shell metacharacters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php

source: wwwsecurityfocuscom/bid/2954/info PHP is the Personal HomePage development toolkit, distributed by the PHPnet, and maintained by the PHP Development Team in public domain A problem with the toolkit could allow elevated privileges, and potentially unauthorized access to restricted resources A local user may upload a malicious p ...

CWE-88 http://www.iss.net/security_center/static/6787.php http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz http://online.securityfocus.com/archive/1/194425 http://www.redhat.com/support/errata/RHSA-2002-102.html http://www.redhat.com/support/errata/RHSA-2002-129.html http://www.redhat.com/support/errata/RHSA-2003-159.html http://www.securityfocus.com/bid/2954 https://nvd.nist.gov https://www.exploit-db.com/exploits/20985/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-1246

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect