Description

The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.

Remediation

References

CVE-2006-7204

Related Vulnerabilities

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-5674)

Oracle JRE CVE-2013-1571 Vulnerability (CVE-2013-1571)

WordPress Plugin Video Gallery /w YouTube, Vimeo Arbitrary File Upload (8.48)

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.38)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43164)

Severity

Low

Classification

CVE-2006-7204

Tags

Missing Update Known Vulnerabilities