Description

PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.

Remediation

References

CVE-2001-1246

Related Vulnerabilities

WordPress Plugin About Author Box Cross-Site Scripting (1.0.1)

WordPress Plugin BackWPup Cross-Site Scripting (3.2.5)

Joomla! Core 3.x.x Cross-Site Scripting (3.0.0 - 3.9.11)

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5712)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (3.7.2.3)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2001-1246