CVE-2002-0986

CVE-2002-0986 describes a vulnerability in the mail function of PHP versions 4.x through 4.2.2, where a lack of ASCII control character filtering in arguments allows remote attackers to manipulate mail message content and headers, potentially enabling PHP to act as a spam proxy. This vulnerability carries a CVSS score of 5.0, indicating a medium severity, with a network-based attack vector, low attack complexity, and a partial impact on integrity. While there is no evidence of active exploitation, exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness among security professionals.