Vulnerability in Php
CVE-2006-7204
The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.
EPSS: 0.004 (28.2th percentile) — read the EPSS interpretation.
Affected products
- Php
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_OSVDB, Patch, vdb-entry, Broken Link)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2006-7204?
- CVE-2006-7204 is a vulnerability in Php. Published 2007-05-22.
- Is CVE-2006-7204 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.