Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PEAR Mail软件包Sendmail Mail::Send()方式参数注入漏洞
Vulnerability Description
PEAR（全称PHP Extension and Application Repository）是PHP Group负责维护的一个PHP扩展及应用的代码仓库。 PEAR的Mail软件包中sendmail实现没有正确地过滤对Mail::Send()方式所提交的from参数，远程攻击者可以向sendmail命令传送任意参数，绕过安全限制获取任意文件的内容。
CVSS Information
N/A
Vulnerability Type
N/A