Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mail function, allows remote attackers to read and create arbitrary files via the sendmail -C and -X arguments. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP additional_parameters 参数注入漏洞
Vulnerability Description
在某些PHP 3.x，4.x和5.x应用程序中存在参数注入漏洞， 当发送邮件和接收远程输入使用到位于mail函数中的additional_parameters参数时，允许远程攻击者通过向发送邮件提供sendmail -C和-X参数，阅读和创建任意文件。注：这是一类技术性漏洞，而非特殊情况，对此可能尚有争论。
CVSS Information
N/A
Vulnerability Type
N/A