Security Advisory

CVE-2005-3883

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-29 11:00:00

Last updated 2024-08-07 23:24:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.

← Browse all CVEs View on cve.org ↗