CVE-2016-10045

🗓️ 30 Dec 2016 19:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 348 Views🌐 WEB

PHPMailer before 5.2.20 allows remote code execution via improper parameter passing

Reporter	Title	Published	Views	Family All 106
0day.today	PHPMailer 5.2.20 - Remote Code Execution Exploit	28 Dec 201600:00	–	zdt
0day.today	PHPMailer Sendmail Argument Injection Exploit	4 Jan 201700:00	–	zdt
0day.today	PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit	22 Jun 201700:00	–	zdt
FreeBSD	phpmailer -- Remote Code Execution	28 Dec 201600:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 9 package phpipam version 1.26.050-alt1	26 Dec 201600:00	–	altlinux
ATTACKERKB	CVE-2016-10033	30 Dec 201600:00	–	attackerkb
AlpineLinux	CVE-2016-10045	30 Dec 201619:00	–	alpinelinux
ArchLinux	[ASA-201701-22] wordpress: multiple issues	15 Jan 201700:00	–	archlinux
Circl	CVE-2016-10045	29 May 201815:50	–	circl
CNVD	PHPMailer Remote Code Execution Vulnerability (CNVD-2017-00052)	30 Dec 201600:00	–	cnvd

NVD

Node

Node

Node

joomla joomla!Range1.5.0–3.6.5

Source	Link
exploit-db	www.exploit-db.com/exploits/40969/
github	www.github.com/PHPMailer/PHPMailer/releases/tag/v5.2.20
exploit-db	www.exploit-db.com/exploits/40986/
legalhackers	www.legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html
openwall	www.openwall.com/lists/oss-security/2016/12/28/1
github	www.github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities
securityfocus	www.securityfocus.com/archive/1/539967/100/0/threaded
securitytracker	www.securitytracker.com/id/1037533
packetstormsecurity	www.packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html
seclists	www.seclists.org/fulldisclosure/2016/Dec/81

Parameter	Position	Path	Description	CWE
action	request body	wordpress/wp-login.php	WordPress Core 4.6 RCE PoC via wp-login.php lostpassword flow using PHPMailer/Exim vector (CVE-2016-10033)	CWE-77
user_login	request body	wordpress/wp-login.php	WordPress Core 4.6 RCE PoC via wp-login.php lostpassword flow using PHPMailer/Exim vector (CVE-2016-10033)	CWE-77
wp-submit	request body	wordpress/wp-login.php	WordPress Core 4.6 RCE PoC via wp-login.php lostpassword flow using PHPMailer/Exim vector (CVE-2016-10033)	CWE-77
redirect_to	request body	wordpress/wp-login.php	WordPress Core 4.6 RCE PoC via wp-login.php lostpassword flow using PHPMailer/Exim vector (CVE-2016-10033)	CWE-77

17 Jun 2026 00:38Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.98038