CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.4. Its EPSS score suggests a 12.1% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2006-1015
Severity
MEDIUM
CVSS
6.4
EPSS
12.12%
Original NVD Description
Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mail function, allows remote attackers to read and create arbitrary files via the sendmail -C and -X arguments. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE.