Unrated severityNVD Advisory· Published Mar 2, 2007· Updated Jun 16, 2026
CVE-2006-7087
CVE-2006-7087
Description
CRLF injection vulnerability in the mail function in Dotdeb PHP before 5.2.0 Rev 3 allows remote attackers to bypass the protection scheme and inject arbitrary email headers via CRLF sequences in the query string, which is processed via the PHP_SELF variable.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:dotdeb:dotdeb_php:4.4.3:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:dotdeb:dotdeb_php:4.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:dotdeb:dotdeb_php:4.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:dotdeb:dotdeb_php:4.4:*:*:*:*:*:*:*
- cpe:2.3:a:dotdeb:dotdeb_php:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:dotdeb:dotdeb_php:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotdeb:dotdeb_php:5.2:*:*:*:*:*:*:*
- (no CPE)range: <5.2.0 Rev 3
Patches
Vulnerability mechanics
References
9- www.dotdeb.org/news/severe_security_hole_in_php_packagesnvdPatchVendor Advisory
- www.securityfocus.com/bid/21075nvdPatchVendor Advisory
- lists.grok.org.uk/pipermail/full-disclosure/2006-November/050712.htmlnvdVendor Advisory
- secunia.com/advisories/22877nvdVendor Advisory
- www.hardened-php.net/advisory_142006.139.htmlnvdVendor Advisory
- www.securityfocus.com/archive/1/451528/100/0/threadednvd
- www.securityfocus.com/archive/1/451839/100/0/threadednvd
- www.vupen.com/english/advisories/2006/4531nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/30251nvd
News mentions
0No linked articles in our index yet.