Search/CVE-2002-0985
● CVE

CVE-2002-0985

Vendorphp, openpkgProductphp, openpkgDiscoveredSep 24, 2002UpdatedApr 16, 2026

Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.

View graph Watch Export
CVSS v3.1
—
EPSS
2.95%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
3 relationships
Timeline
disclosure → media coverage
Sep 24, 2002
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026