PHP4 and PHP5, when used with Sendmail, allow for a security bypass in mb_send_mail.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44291/mb_send_mail_bypass.txt
Source: https://packetstormsecurity.com/files/44291/mb_send_mail_bypass.txt.html