Unscored DSA-1938-1 2 CVEs

php-mail - insufficient input sanitising

Published Nov 23, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	php-mail	1.1.6-2+etch1
Debian · 5.0	php-mail	1.1.14-1+lenny1

Vulnerabilities 2

Unscored —

CVE-2009-4023

Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mai…

php-mail Debian

Nov 28, 2009
Unscored —

CVE-2009-4111

Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions …

php-mail Debian

Nov 28, 2009