Lucene search
Gentoo FoundationMGASA-2017-0022HistoryJan 27, 2017 - 12:19 p.m.
Updated php-phpmailer packages fix security vulnerabilities
2017-01-2712:19:09
Gentoo Foundation
advisories.mageia.org
12
0.971 High
EPSS
Percentile
99.8%
It was discovered that PHPMailer, a popular library to send email from PHP applications, allowed a remote attacker to execute code if they were able to provide a crafted Sender address (CVE-2016-10033). It was discovered that PHPMailer prior to 5.2.22 contained a local file disclosure vulnerability if content passed to msgHTML() was sourced from unfiltered user input (CVE-2017-5223).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | php-phpmailer | <Β 5.2.22-1 | php-phpmailer-5.2.22-1.mga5 |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0022)
2022-01-28 00:00:00
Fedora Update for php-PHPMailer FEDORA-2017-c3dc97e1e1
2017-01-18 00:00:00
PHPMailer < 5.2.18 Remote Code Execution Vulnerability.
2016-12-27 00:00:00
nessus
nessus
Fedora 24 : php-PHPMailer (2017-c3dc97e1e1)
2017-01-18 00:00:00
FreeBSD : phpmailer -- Remote Code Execution (c7656d4c-cb60-11e6-a9a5-b499baebfeaf)
2016-12-27 00:00:00
F5 Networks BIG-IP : PHPMailer vulnerability (K74977440)
2017-05-16 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: php-PHPMailer-5.2.22-1.fc24
2017-01-17 20:21:44
[SECURITY] Fedora 25 Update: php-PHPMailer-5.2.21-1.fc25
2017-01-06 04:52:02
prion
prion
Command injection
2016-12-30 19:59:00
Design/Logic Flaw
2017-01-16 06:59:00
Design/Logic Flaw
2016-12-31 02:59:00
packetstorm
packetstorm
PHPMailer Remote Code Execution
2016-12-29 00:00:00
WordPress PHPMailer Host Header Command Injection
2017-05-17 00:00:00
PHPMailer 5.2.17 Remote Code Execution
2016-12-26 00:00:00
saint
saint
PHPMailer Command Injection in WordPress Core via Exim
2017-05-17 00:00:00
PHPMailer Command Injection in WordPress Core via Exim
2017-05-17 00:00:00
PHPMailer PwnScriptum Remote Code Execution
2017-01-05 00:00:00
metasploit
metasploit
PHPMailer Sendmail Argument Injection
2016-12-29 22:17:06
WordPress PHPMailer Host Header Command Injection
2017-05-10 20:17:20
friendsofphp
friendsofphp
Remote Code Execution
2016-12-23 23:40:00
Local File Disclosure
2016-01-06 21:35:04
nuclei
nuclei
WordPress PHPMailer < 5.2.18 - Remote Code Execution
2021-03-24 11:33:21
hackerone
hackerone
veracode
veracode
Remote Code Execution (RCE)
2017-11-29 04:14:19
Local File Inclusion
2017-07-25 08:04:33
Remote Code Execution (RCE)
2017-07-26 01:24:02
freebsd
freebsd
phpmailer -- Remote Code Execution
2016-12-26 00:00:00
phpmailer -- Remote Code Execution
2017-01-10 00:00:00
phpmailer -- Remote Code Execution
2016-12-28 00:00:00
debiancve
debiancve
thn
thn
0-Day Flaws in Vanilla Forums Let Remote Attackers Hack Websites
2017-05-11 21:33:00
Critical Updates β RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail
2017-01-02 23:45:00
patchstack
patchstack
WordPress Huge-IT Video Gallery plugin <=2.0.4 - SQL Injection vulnerability
2017-05-24 00:00:00
myhack58
myhack58
exploitpack
exploitpack
PHPMailer 5.2.18 - Remote Code Execution (PHP)
2016-12-25 00:00:00
WordPress 4.6 - Remote Code Execution
2017-05-03 00:00:00
PHPMailer 5.2.18 - Remote Code Execution (Bash)
2016-12-26 00:00:00
zdt
zdt
PHPMailer 5.2.17 - Remote Code Execution Exploit
2016-12-26 00:00:00
PHPMailer < 5.2.18 Remote Code Execution Vulnerability
2016-12-26 00:00:00
PHPMailer 5.2.18 - Remote Code Execution (Python) Exploit
2016-12-29 00:00:00
alpinelinux
alpinelinux
CVE-2016-10033
2016-12-30 19:59:00
cvelist
cvelist
f5
f5
K74977440 : PHPMailer vulnerability CVE-2016-10033
2017-01-24 00:00:00
K73926196 : PHPMailer vulnerability CVE-2016-10045
2017-02-13 00:00:00
joomla
joomla
Chronoforms 5.0.12 PHP mailer vulnerability
2016-12-27 00:00:00
AcyMailing 5.6.0 PHP Mailer vulnerability
2016-12-28 00:00:00
Jomres 9.8.22 and previous PHPMailer vulnerability
2016-12-31 00:00:00
cve
cve
CVE-2016-10033
2016-12-30 19:59:00
CVE-2017-5223
2017-01-16 06:59:00
osv
osv
CVE-2017-5223
2017-01-16 06:59:00
Local file disclosure in PHPMailer
2020-03-05 22:09:10
CVE-2016-10033
2016-12-30 19:59:00
seebug
seebug
PHPMailer local file read Vulnerability (CVE-2017-5223)
2017-01-12 00:00:00
BigTree CMS - Bypass CSRF filter and execute code with PHPMailer
2017-04-25 00:00:00
PHPMailer < 5.2.18 Remote Code ExecutionοΌCVE-2016-10033οΌ
(PwnScriptum)
2016-12-26 00:00:00
ubuntucve
ubuntucve
checkpoint_advisories
checkpoint_advisories
PHPMailer Local Information Disclosure (CVE-2017-5223) - Ver2
2018-04-11 00:00:00
PHPMailer Mail From Remote Code Execution (CVE-2016-10033; CVE-2016-10045)
2016-12-27 00:00:00
github
github
Local file disclosure in PHPMailer
2020-03-05 22:09:10
Remote code execution in PHPMailer
2020-03-05 22:09:17
Remote code execution in PHPMailer
2020-03-05 22:09:14
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.27.002-alt1
2017-01-10 00:00:00
Security fix for the ALT Linux 9 package phpipam version 1.26.050-alt1
2016-12-26 00:00:00
exploitdb
exploitdb
WordPress Plugin PHPMailer 4.6 - Host Header Command Injection (Metasploit)
2017-05-17 00:00:00
PHPMailer < 5.2.18 - Remote Code Execution
2016-12-25 00:00:00
WordPress Core 4.6 - Remote Code Execution
2017-05-03 00:00:00
debian
debian
[SECURITY] [DSA 3750-1] libphp-phpmailer security update
2016-12-31 10:48:11
[SECURITY] [DSA 3750-2] libphp-phpmailer regression update
2017-01-03 18:31:58
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-07-01 18:44:47
attackerkb
attackerkb
CVE-2016-10033
2016-12-30 00:00:00
threatpost
threatpost
ubuntu
ubuntu
PHPMailer vulnerability
2023-03-15 00:00:00
PHPMailer vulnerabilities
2023-03-15 00:00:00
rapid7community
rapid7community
Metasploit Wrapup
2017-05-26 19:06:43
archlinux
archlinux
[ASA-201701-22] wordpress: multiple issues
2017-01-15 00:00:00