Unrated severityNVD Advisory· Published May 22, 2007· Updated Jun 16, 2026

CVE-2006-7204

Description

The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP/PHP2 versions
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: >=4.4.0,<4.4.4
- (no CPE)range: <4.4.4

Patches

Vulnerability mechanics

References

secunia.com/advisories/21546nvdPatchVendor Advisory
www.osvdb.org/28005nvdBroken LinkPatch
bugs.php.net/bug.phpnvdVendor Advisory
us2.php.net/ChangeLog-4.phpnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000