NVD

Id
59738  
Name
CVE-2006-1015  
Description
Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mail function, allows remote attackers to read and create arbitrary files via the sendmail -C and -X arguments. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-03-06  
Modified Date
2008-09-05  
Seq
2006-1015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307269 59738 CVE-2006-1015 517  View
307270 59738 CVE-2006-1015 SUSE-SA:2006:024  View
307271 59738 CVE-2006-1015 20060301 Re: (PHP) mb_send_mail security bypass  View
307272 59738 CVE-2006-1015 16878  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61473 JVNDB-2006-003739 特定の PHP のアプリケーションにおける任意のファイルを読まれる脆弱性 特定の PHP のアプリケーションには、引数の挿入により、任意のファイルを読まれる、または作成される脆弱性が存在します。 CVE-2006-1015 17117 CVE-2006-1015 59738 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003739.html 2006-03-07 2013-12-26 View