Описание
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " (backslash double quote) in a crafted Sender property.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Mailing ListPatchThird Party Advisory
- ExploitThird Party Advisory
- Broken LinkThird Party AdvisoryVDB Entry
- Broken LinkExploitThird Party AdvisoryVDB Entry
- Broken LinkThird Party AdvisoryVDB Entry
- Third Party Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- ExploitPatchThird Party Advisory
- Third Party Advisory
- ExploitPatchThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitPatchThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 5.2.18 (исключая)
cpe:2.3:a:phpmailer_project:phpmailer:*:*:*:*:*:*:*:*
Конфигурация 2Версия до 4.7 (включая)
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
Конфигурация 3Версия от 1.5.0 (включая) до 3.6.5 (включая)
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
EPSS
Процентиль: 100%
0.94415
Критический
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-88
CWE-88
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 8 лет назад
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
CVSS3: 9.8
debian
больше 8 лет назад
The mailSend function in the isMail transport in PHPMailer before 5.2. ...
EPSS
Процентиль: 100%
0.94415
Критический
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-88
CWE-88