← Database

CVE-2005-3883

MEDIUM CVSS: 5.0 Published: 2005-11-29 Modified: 2026-06-16

Description

CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.

Affected Platforms

Php Php

Weakness Type

NVD-CWE-Other

References