Lucene search
MitreCVELIST:CVE-2016-10034HistoryDec 30, 2016 - 7:00 p.m.
CVE-2016-10034
2016-12-3019:00:00
mitre
www.cve.org
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " (backslash double quote) in a crafted e-mail address.
References
www.securityfocus.com/bid/95144
www.securitytracker.com/id/1037539
framework.zend.com/security/advisory/ZF2016-04
legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.html
security.gentoo.org/glsa/201804-10
www.exploit-db.com/exploits/40979/
www.exploit-db.com/exploits/40986/
www.exploit-db.com/exploits/42221/
Related
zdt
zdt
Zend Framework / zend-mail 2.4.11 - Remote Code Execution Exploit
2016-12-31 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit
2017-06-22 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2017-08-23 08:09:52
prion
prion
Command injection
2016-12-30 19:59:00
osv
osv
zend-mail remote code execution via Sendmail adapter
2022-05-14 02:19:49
CVE-2016-10034
2016-12-30 19:59:00
cve
cve
CVE-2016-10034
2016-12-30 19:59:00
ubuntucve
ubuntucve
CVE-2016-10034
2016-12-30 00:00:00
github
github
zend-mail remote code execution via Sendmail adapter
2022-05-14 02:19:49
nvd
nvd
CVE-2016-10034
2016-12-30 19:59:00
hackerone
hackerone
mageia
mageia
Updated php-ZendFramework2 packages fix security vulnerability
2017-01-13 13:32:16
f5
f5
K79502122 : Zend Framework vulnerability CVE-2016-10034
2017-01-16 00:00:00
exploitpack
exploitpack
Zend Framework zend-mail 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0016)
2022-01-28 00:00:00
exploitdb
exploitdb
Zend Framework / zend-mail < 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - 'AIO' 'PwnScriptum' Remote Code Execution
2017-01-02 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
nessus
nessus
GLSA-201804-10 : Zend Framework: Multiple vulnerabilities
2018-04-10 00:00:00
gentoo
gentoo
Zend Framework: Multiple vulnerabilities
2018-04-09 00:00:00
thn
thn
Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail
2017-01-02 23:45:00
packetstorm
packetstorm
PHPMailer / Zend-mail / SwiftMailer Remote Code Execution
2017-01-03 00:00:00
myhack58
myhack58
threatpost
threatpost