CVE-2012-0796

2012-07-17T10:20:00
ID CVE-2012-0796
Type cve
Reporter secalert@redhat.com
Modified 2020-12-01T14:43:00

Description

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.