Description

The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.

Remediation

References

CVE-2006-7204

Related Vulnerabilities

WordPress Plugin Mass Pages/Posts Creator Cross-Site Scripting (1.2.2)

Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-36289)

Oracle JRE CVE-2013-1564 Vulnerability (CVE-2013-1564)

Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)

WordPress Plugin Stealth Login Page Unspecified Vulnerability (1.1.3)

Severity

Low

Classification

CVE-2006-7204

Tags

Missing Update Known Vulnerabilities