CVE-2007-1718
PHP <5.2.1 - CRLF Injection
Title source: llmDescription
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Stefan Esser · phpremotephp
https://www.exploit-db.com/exploits/29784
References (26)
... and 6 more
Scores
EPSS
0.2403
EPSS Percentile
96.1%
Details
Status
published
Products (36)
php/php
4.0 (8 CPE variants)
php/php
4.0.0
php/php
4.0.1 (3 CPE variants)
php/php
4.0.2
php/php
4.0.3 (2 CPE variants)
php/php
4.0.4 (2 CPE variants)
php/php
4.0.5
php/php
4.0.6
php/php
4.0.7 (4 CPE variants)
php/php
4.1.0
... and 26 more
Published
Mar 28, 2007
Tracked Since
Feb 18, 2026