NVD

Id
65630  
Name
CVE-2006-7087  
Description
CRLF injection vulnerability in the mail function in Dotdeb PHP before 5.2.0 Rev 3 allows remote attackers to bypass the protection scheme and inject arbitrary email headers via CRLF sequences in the query string, which is processed via the PHP_SELF variable.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-03-02  
Modified Date
2011-03-07  
Seq
2006-7087  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
341915 65630 CVE-2006-7087 20061114 Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability  View
341916 65630 CVE-2006-7087 http://www.dotdeb.org/news/severe_security_hole_in_php_packages  View
341917 65630 CVE-2006-7087 http://www.hardened-php.net/advisory_142006.139.html  View
341918 65630 CVE-2006-7087 20061114 Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability  View
341919 65630 CVE-2006-7087 20061114 Re: Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability  View
341920 65630 CVE-2006-7087 21075  View
341921 65630 CVE-2006-7087 ADV-2006-4531  View
341922 65630 CVE-2006-7087 dotdeb-mail-header-injection(30251)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52593 JVNDB-2007-001285 Dotdeb PHP の mail 関数における CRLF インジェクションの脆弱性 Dotdeb PHP の mail 関数には、CRLF インジェクションの脆弱性が存在します。 CVE-2006-7087 23189 CVE-2006-7087 65630 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001285.html 2007-03-02 2012-06-26 View