$ cve CVE-2006-0757 JSON

CVE-2006-0757 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 3.2% (pctl 88)

Patch early

A public exploit exists.

Description

Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contactgroupid parameter in addressbook.update.php, (2) the messageid parameter in addressbook.add.php, (3) the folderid parameter in folders.update.php, and possibly certain parameters in (4) calendar.event.php, (5) index.php, (6) pop.download.php, (7) read.bounce.php, (8) rules.block.php, (9) language.php, and (10) certain other scripts, as demonstrated by an addressbook.update.php request with a contactgroupid value of phpinfo() preceded by facilitators.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	3.23% — more likely to be exploited than 88% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2006-02-18
Last modified	2026-06-16

Affected (1)

Vendor	Product
hivemail	hivemail

Public exploits

Source	Title	Date
exploit-db	HiveMail 1.3 - 'addressbook.add.php' Remote Code Execution	2006-05-06
exploit-db	HiveMail 1.2.2/1.3 - 'addressbook.update.php?contactgroupid' Arbitrary PHP Command Execution	2006-02-11
exploit-db	HiveMail 1.2.2/1.3 - 'folders.update.php?folderid' Arbitrary PHP Command Execution	2006-02-11

References

→ the Explorer · watch your stack · NVD