CVE-2007-1718
Last modified
CVE-2007-1718 is a vulnerability of currently unknown severity. CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.. EPSS estimates a 6.69% chance of exploitation in the next 30 days.
Description
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Php | Php | 4.0 | — |
| Php | Php | 4.0.0 | — |
| Php | Php | 4.0.1 | — |
| Php | Php | 4.0.2 | — |
| Php | Php | 4.0.3 | — |
| Php | Php | 4.0.4 | — |
| Php | Php | 4.0.5 | — |
| Php | Php | 4.0.6 | — |
| Php | Php | 4.0.7 | — |
| Php | Php | 4.1.0 | — |
| Php | Php | 4.1.1 | — |
| Php | Php | 4.1.2 | — |
| Php | Php | 4.2 | — |
| Php | Php | 4.2.0 | — |
| Php | Php | 4.2.1 | — |
| Php | Php | 4.2.2 | — |
| Php | Php | 4.2.3 | — |
| Php | Php | 4.3.0 | — |
| Php | Php | 4.3.1 | — |
| Php | Php | 4.3.2 | — |
| Php | Php | 4.3.3 | — |
| Php | Php | 4.3.4 | — |
| Php | Php | 4.3.5 | — |
| Php | Php | 4.3.6 | — |
| Php | Php | 4.3.7 | — |
| Php | Php | 4.3.8 | — |
| Php | Php | 4.3.9 | — |
| Php | Php | 4.3.10 | — |
| Php | Php | 4.3.11 | — |
| Php | Php | 4.4.0 | — |
| Php | Php | 4.4.1 | — |
| Php | Php | 4.4.2 | — |
| Php | Php | 4.4.3 | — |
| Php | Php | 4.4.4 | — |
| Php | Php | 4.4.5 | — |
| Php | Php | 4.4.6 | — |
| Php | Php | 5.0 | Rc1 |
| Php | Php | 5.0.0 | — |
| Php | Php | 5.0.1 | — |
| Php | Php | 5.0.2 | — |
| Php | Php | 5.0.3 | — |
| Php | Php | 5.0.4 | — |
| Php | Php | 5.0.5 | — |
| Php | Php | 5.1.0 | — |
| Php | Php | 5.1.1 | — |
| Php | Php | 5.1.2 | — |
| Php | Php | 5.1.3 | — |
| Php | Php | 5.1.4 | — |
| Php | Php | 5.1.5 | — |
| Php | Php | 5.1.6 | — |
Showing 50 of 52 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1718?
How severe is CVE-2007-1718?
How do I fix CVE-2007-1718?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-1712SQL injection vulnerability in default.asp in ActiveWebSoftw…
- CVE-2007-1713CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 …
- CVE-2007-1714Cross-site scripting (XSS) vulnerability in index.php in CcC…
- CVE-2007-1715PHP remote file inclusion vulnerability in frontpage.php in …
- CVE-2007-1716pam_console does not properly restore ownership for certain …
- CVE-2007-1717The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 throu…
- CVE-2007-1719Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on…
- CVE-2007-1720Directory traversal vulnerability in addressbook.php in the …
- CVE-2007-1721Multiple PHP remote file inclusion vulnerabilities in C-Arbr…
- CVE-2007-1722Buffer overflow in the DownloadCertificateExt function in Si…
- CVE-2007-1723Multiple cross-site scripting (XSS) vulnerabilities in the a…
- CVE-2007-1724Unspecified vulnerability in ReactOS 0.3.1 has unknown impac…
Are you affected by CVE-2007-1718?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST