Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in the mail function in Dotdeb PHP before 5.2.0 Rev 3 allows remote attackers to bypass the protection scheme and inject arbitrary email headers via CRLF sequences in the query string, which is processed via the PHP_SELF variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dotdeb PHP 邮件函数 CRLF注入漏洞
Vulnerability Description
Dotdeb PHP 5.2.0 Rev 3之前版本的邮件函数中存在CRLF注入漏洞。远程攻击者可以借助查询字符串中的CRLF序列，绕过保护机制和注入任意的电子邮件头。借助PHP_SELF变量可以对其进行处理。
CVSS Information
N/A
Vulnerability Type
N/A