Description
CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.
Remediation
References
Related Vulnerabilities
PHP Out-of-bounds Read Vulnerability (CVE-2019-11035)
Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2022-48565)
Apache HTTP Server CVE-2003-0789 Vulnerability (CVE-2003-0789)
Oracle Application Server CVE-2006-3712 Vulnerability (CVE-2006-3712)
WordPress Plugin Fast Velocity Minify Information Disclosure (2.7.6)