CVE-2007-1718
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5...
7.8 HighPublic exploitFix available
CVE-2007-1718 is a high vulnerability (CVSS 7.8) in Php, published March 28, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.95%, the 94th percentile. Fixed in php4 4:4.3.10-20.
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
Exploit likelihood
6.95%Up 2.6 points since Feb 4, 2022
What each source reports
NVD Score used
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
- Record
CVE-2007-1718- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:C/A:N - Updated
- 2026-11-02
CVE List No score
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
- Record
CVE-2007-1718- Updated
- 2026-11-02
EUVDEUVD-2007-1712 No score
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
- Record
EUVD-2007-1712- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jrgc-qgpq-qfc5 No score
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5...
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
- Record
GHSA-jrgc-qgpq-qfc5- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php4Debian:3.1 |
before 4:4.3.10-20, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-19 |
4:4.3.10-20 |
php4Debian:4.0 |
before 6:4.4.4-8+etch2, plus listed versions 6:4.4.4-8+etch1 |
6:4.4.4-8+etch2 |
php5Debian:4.0 |
before 5.2.0-8+etch3, plus listed versions 5.2.0-8+etch1 |
5.2.0-8+etch3 |
php5Debian:5.0 |
before 5.2.0-10+lenny1 | 5.2.0-10+lenny1 |
php4Debian:5.0 |
before 6:4.4.4-9+lenny1, plus listed versions 4.0.3pl1-0potato34.0.3pl1-0potato44:4.1.2-74:4.1.2-7.0.14:4.1.2-7.woody3 Show 41 moreShow less4:4.1.2-7.woody44:4.1.2-7.woody54:4.1.2-7woody14:4.1.2-7woody24:4.3.10-104:4.3.10-114:4.3.10-124:4.3.10-134:4.3.10-144:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-194:4.3.10-204:4.3.10-214:4.3.10-224:4.3.10-84:4.3.10-94:4.4.0-14:4.4.0-24:4.4.0-34:4.4.0-44:4.4.2-14:4.4.2-1+b14:4.4.2-1.14:4.4.4-14:4.4.4-24:4.4.4-34:4.4.4-44:4.4.4-4~44:4.4.4-54:4.4.4-64:4.4.4-76:4.4.4-86:4.4.4-8+etch16:4.4.4-8+etch26:4.4.4-8+etch36:4.4.4-8+etch46:4.4.4-8+etch66:4.4.4-9 |
6:4.4.4-9+lenny1 |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
Show 147 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
phpRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-bcmathRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-cliRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-commonRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-dbaRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-debuginfoRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-develRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-gdRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-imapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-ldapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-mbstringRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-mysqlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-ncursesRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-odbcRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-pdoRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-pgsqlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-snmpRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-soapRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-xmlRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-xmlrpcRed Hat:rhel_application_stack:1 |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP 5.2.1 - Folded Mail Headers Email Header Injection | 2007-11-26 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases | |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/23145
secunia.com/advisories/25056
debian.org/security/2007/dsa-1283
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10951
security.gentoo.org/glsa/glsa-200705-19.xml
securitytracker.com/id?1017946
Show 62 moreShow less
redhat.com/support/errata/RHSA-2007-0162.html
exchange.xforce.ibmcloud.com/vulnerabilities/33516
mandriva.com/security/advisories?name=MDKSA-2007:090
ubuntu.com/usn/usn-455-1
php-security.org/MOPB/MOPB-34-2007.html
us2.php.net/releases/5_2_2.php
rhn.redhat.com/errata/RHSA-2007-0155.html
novell.com/linux/security/advisories/2007_32_php.html
nvd.nist.gov/vuln/detail/CVE-2007-1718
github.com/advisories/GHSA-jrgc-qgpq-qfc5
access.redhat.com/errata/RHSA-2007:0153
bugzilla.redhat.com/show_bug.cgi?id=235016
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0153.json
cve.org/CVERecord?id=CVE-2007-0455