EUVD-2020-0337

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Multiple CRLF injection flaws in PHPMailer before 5.2.14 allow SMTP command injection attacks.

Reporter	Title	Published	Views	Family All 42
ALT Linux	Security fix for the ALT Linux 9 package phpipam version 1.26.050-alt1	26 Dec 201600:00	–	altlinux
CNVD	PHPMailer 'class.phpmailer.php' Security Bypass Vulnerability	16 Dec 201500:00	–	cnvd
CVE	CVE-2015-8476	16 Dec 201521:00	–	cve
Cvelist	CVE-2015-8476	16 Dec 201521:00	–	cvelist
Debian	[SECURITY] [DLA 363-1] libphp-phpmailer security update	8 Dec 201518:35	–	debian
Debian	[SECURITY] [DSA 3416-1] libphp-phpmailer security update	13 Dec 201519:11	–	debian
Debian	[SECURITY] [DSA 3416-1] libphp-phpmailer security update	13 Dec 201519:11	–	debian
Debian CVE	CVE-2015-8476	16 Dec 201521:00	–	debiancve
Tenable Nessus	Debian DLA-363-1 : libphp-phpmailer security update	9 Dec 201500:00	–	nessus
Tenable Nessus	Debian DSA-3416-1 : libphp-phpmailer - security update	14 Dec 201500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "1cefe863-4390-3c66-883d-ca49f0270c2e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "943b7f2a-72b7-3f6e-940c-9d7481257fdb",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/PHPMailer/PHPMailer/security/advisories/GHSA-738m-f33v-qc2r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-8476
github	www.github.com/PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2015-8476.yaml
github	www.github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/177130.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/177139.html
debian	www.debian.org/security/2015/dsa-3416
openwall	www.openwall.com/lists/oss-security/2015/12/04/5
openwall	www.openwall.com/lists/oss-security/2015/12/05/1

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 25

EPSS0.00948