CVE-2006-5313

Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct SMTP session. NOTE: this is a different type of issue than CVE-2006-5262.

• CWE-20

• http://hastymail.sourceforge.net/security.phpPatch
• http://secunia.com/advisories/22308Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/453417/100/0/threaded
• http://www.securityfocus.com/bid/20424Patch
• http://www.vupen.com/english/advisories/2006/3956Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29407
• http://hastymail.sourceforge.net/security.phpPatch
• http://secunia.com/advisories/22308Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/453417/100/0/threaded
• http://www.securityfocus.com/bid/20424Patch
• http://www.vupen.com/english/advisories/2006/3956Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29407

Published

Oct 17, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5307Multiple PHP remote file inclusion vulnerabilities in AFGB G…
• CVE-2006-5308Multiple PHP remote file inclusion vulnerabilities in Open C…
• CVE-2006-5309PHP remote file inclusion vulnerability in language/lang_fre…
• CVE-2006-5310PHP remote file inclusion vulnerability in common/visiteurs/…
• CVE-2006-5311PHP remote file inclusion vulnerability in includes/archive/…
• CVE-2006-5312PHP remote file inclusion vulnerability in shoutbox.php in t…
• CVE-2006-5314PHP remote file inclusion vulnerability in ftag.php in Tribu…
• CVE-2006-5315PHP remote file inclusion vulnerability in main.php in regis…
• CVE-2006-5316registroTL stores sensitive information under the web root w…
• CVE-2006-5317PHP remote file inclusion vulnerability in index.php in ebol…
• CVE-2006-5318PHP remote file inclusion vulnerability in index.php in Nayc…
• CVE-2006-5319Directory traversal vulnerability in redir.php in Foafgen 0.…