CVE-2012-0796

2012-07-17T10:20:00
ID CVE-2012-0796
Type cve
Reporter cve@mitre.org
Modified 2017-12-22T02:29:00

Description

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.