Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP c-client library多个安全绕过漏洞
Vulnerability Description
用于PHP的c-client library 2000、2001、或2004在4.4.4版本之前和5.1.5版本之前的5.x,不会检查(1) safe_mode 或(2) open_basedir 函数,还有当使用在用于imap_open函数的邮箱参数并接受用户控制输入的应用程序中时,会使远程攻击者取得对一条IMAP流数据结构的访问和实施非法操作。
CVSS Information
N/A
Vulnerability Type
N/A