Full Featured Email Transfer Class for PHP. PHPMailer features: * Supports emails digitally signed with S/MIME encryption! * Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs * Works on any platform. * Supports Text & HTML emails. * Embedded image support. * Multipart/alternative emails for mail clients that do not read HTML email. * Flexible debugging. * Custom mail headers. * Redundant SMTP servers. * Support for 8bit, base64, binary, and quoted-printable encoding. * Word wrap. * Multiple fs, string, and binary attachments (those from database, string, etc). * SMTP authentication. * Tested on multiple SMTP servers: Sendmail, qmail, Postfix, Gmail, Imail, Exchange, etc. * Good documentation, many examples included in download. * It’s swift, small, and simple.

OSVersionArchitecturePackageVersionFilename
Fedora24anyphp-phpmailer< 5.2.22UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	24	any	php-phpmailer	< 5.2.22	UNKNOWN

nessus 24

openvas 10

threatpost 3

osv 12

ubuntucve 3

debian 7

checkpoint_advisories 2

fedora 1

rapid7blog 1

packetstorm 11

attackerkb 1

joomla 5

freebsd 4

myhack58 6

prion 4

zdt 10

veracode 3

alpinelinux 2

debiancve 3

seebug 7

f5 2

exploitpack 9

github 3

cve 4

mageia 1

altlinux 2

exploitdb 10

ubuntu 2

thn 3

typo3 3

metasploit 2

saint 6

hackerone 1

nuclei 1

patchstack 1

archlinux 1

rapid7community 1

nessus

Fedora 24 : php-PHPMailer (2017-c3dc97e1e1)

2017-01-18 00:00:00

Fedora 25 : php-PHPMailer (2016-6941d25875)

2017-01-06 00:00:00

Debian DSA-3750-1 : libphp-phpmailer - security update

2017-01-03 00:00:00

openvas

Fedora Update for php-PHPMailer FEDORA-2017-c3dc97e1e1

2017-01-18 00:00:00

Debian Security Advisory DSA 3750-1 (libphp-phpmailer - security update)

2017-01-05 00:00:00

Debian Security Advisory DSA 3750-1 (libphp-phpmailer - security update)

2017-01-05 00:00:00

threatpost

PHPMailer Bug Leaves Millions of Websites Open to Attack

2016-12-27 13:22:54

PHPMailer, SwiftMailer Updates Resolve Critical Remote Code Execution Vulnerabilities

2016-12-29 14:20:38

Vanilla Forums Open Source Software Vulnerable to RCE, Host Header Injection Vulnerability

2017-05-11 16:39:13

osv

Remote code execution in PHPMailer

2020-03-05 22:09:17

CVE-2016-10033

2016-12-30 19:59:00

CVE-2016-10045

2016-12-30 19:59:00

ubuntucve

CVE-2016-10045

2016-12-30 00:00:00

CVE-2016-10033

2016-12-30 00:00:00

CVE-2017-5223

2017-01-16 00:00:00

debian

[SECURITY] [DLA 770-1] libphp-phpmailer security update

2016-12-31 14:24:48

[SECURITY] [DSA 3750-1] libphp-phpmailer security update

2016-12-31 10:48:11

[SECURITY] [DSA 3750-2] libphp-phpmailer regression update

2017-01-03 18:31:58

checkpoint_advisories

PHPMailer Mail From Remote Code Execution (CVE-2016-10033; CVE-2016-10045)

2016-12-27 00:00:00

PHPMailer Local Information Disclosure (CVE-2017-5223) - Ver2

2018-04-11 00:00:00

fedora

[SECURITY] Fedora 25 Update: php-PHPMailer-5.2.21-1.fc25

2017-01-06 04:52:02

rapid7blog

Metasploit Weekly Wrap-Up

2022-07-01 18:44:47

packetstorm

PHPMailer Sendmail Argument Injection

2017-01-04 00:00:00

SmartJobBoard 5.0.9 Cross Site Scripting / Information Disclosure

2017-04-04 00:00:00

PHPMailer Remote Code Execution

2016-12-28 00:00:00

attackerkb

CVE-2016-10033

2016-12-30 00:00:00

joomla

AcyMailing 5.6.0 PHP Mailer vulnerability

2016-12-28 00:00:00

Jomres 9.8.22 and previous PHPMailer vulnerability

2016-12-31 00:00:00

[20161205] - PHPMailer Security Advisory

2016-12-30 19:59:00

freebsd

phpmailer -- Remote Code Execution

2016-12-28 00:00:00

phpmailer -- Remote Code Execution

2016-12-26 00:00:00

phpmailer -- Remote Code Execution

2017-01-10 00:00:00

myhack58

WordPress 4.6 remote code execution vulnerability-vulnerability warning-the black bar safety net

2017-05-05 00:00:00

PhpMailer and SwiftMailer, the ZendMail successive exposure of the RCE high-risk vulnerabilities, affecting millions of Web servers-vulnerability warning-the black bar safety net

2017-01-05 00:00:00

The widespread use of email components: PHPMailer remote code execution vulnerability exists-vulnerability warning-the black bar safety net

2016-12-28 00:00:00

prion

Command injection

2016-12-30 19:59:00

Command injection

2016-12-30 19:59:00

Design/Logic Flaw

2017-01-16 06:59:00

zdt

PHPMailer Sendmail Argument Injection Exploit

2017-01-04 00:00:00

PHPMailer 5.2.20 - Remote Code Execution Exploit

2016-12-28 00:00:00

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit

2017-06-22 00:00:00

veracode

Remote Code Execution (RCE)

2017-07-26 01:24:02

Remote Code Execution (RCE)

2017-11-29 04:14:19

Local File Inclusion

2017-07-25 08:04:33

alpinelinux

CVE-2016-10045

2016-12-30 19:59:00

CVE-2016-10033

2016-12-30 19:59:00

debiancve

CVE-2016-10045

2016-12-30 19:59:00

CVE-2016-10033

2016-12-30 19:59:00

CVE-2017-5223

2017-01-16 06:59:00

seebug

PHPMailer < 5.2.20 Remote Code Execution (0day Patch Bypass/exploit) (CVE-2016-10045)

2016-12-29 00:00:00

WordPress Core 4.6 - Unauthenticated Remote Code Execution

2017-05-04 00:00:00

PHPMailer local file read Vulnerability (CVE-2017-5223)

2017-01-12 00:00:00

K73926196 : PHPMailer vulnerability CVE-2016-10045

2017-02-13 00:00:00

K74977440 : PHPMailer vulnerability CVE-2016-10033

2017-01-24 00:00:00

exploitpack

PHPMailer 5.2.20 - Remote Code Execution

2016-12-27 00:00:00

PHPMailer 5.2.20 SwiftMailer 5.4.5-DEV Zend Framework zend-mail 2.4.11 - AIO PwnScriptum Remote Code Execution

2017-01-02 00:00:00

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution

2017-06-21 00:00:00

github

Remote code execution in PHPMailer

2020-03-05 22:09:14

Remote code execution in PHPMailer

2020-03-05 22:09:17

Local file disclosure in PHPMailer

2020-03-05 22:09:10

cve

CVE-2016-10045

2016-12-30 19:59:00

CVE-2017-5223

2017-01-16 06:59:00

CVE-2016-10033

2016-12-30 19:59:00

mageia

Updated php-phpmailer packages fix security vulnerabilities

2017-01-27 12:19:09

altlinux

Security fix for the ALT Linux 9 package phpipam version 1.26.050-alt1

2016-12-26 00:00:00

Security fix for the ALT Linux 9 package phpipam version 1.27.002-alt1

2017-01-10 00:00:00

exploitdb

PHPMailer < 5.2.20 - Remote Code Execution

2016-12-27 00:00:00

WordPress Plugin PHPMailer 4.6 - Host Header Command Injection (Metasploit)

2017-05-17 00:00:00

PHPMailer < 5.2.18 - Remote Code Execution

2016-12-25 00:00:00

ubuntu

PHPMailer vulnerability

2023-03-15 00:00:00

PHPMailer vulnerabilities

2023-03-15 00:00:00

thn

Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail

2017-01-02 23:45:00

Critical PHPMailer Flaw leaves Millions of Websites Vulnerable to Remote Exploit

2016-12-26 00:26:00

0-Day Flaws in Vanilla Forums Let Remote Attackers Hack Websites

2017-05-11 21:33:00

typo3

Remote Code Execution in extension "AH Sendmail" (ah_sendmail)

2017-07-11 00:00:00

Remote Code Execution in extension "Maag Sendmail" (maag_sendmail)

2017-07-11 00:00:00

Remote Code Execution in extension "PHPMailer" (bb_phpmailer)

2017-07-11 00:00:00

metasploit

WordPress PHPMailer Host Header Command Injection

2017-05-10 20:17:20

PHPMailer Sendmail Argument Injection

2016-12-29 22:17:06

saint

PHPMailer Command Injection in WordPress Core via Exim

2017-05-17 00:00:00

PHPMailer Command Injection in WordPress Core via Exim

2017-05-17 00:00:00

PHPMailer PwnScriptum Remote Code Execution

2017-01-05 00:00:00

hackerone

Imgur: RCE by command line argument injection to `gm convert` in `/edit/process?a=crop`

2017-03-12 03:46:46

nuclei

WordPress PHPMailer < 5.2.18 - Remote Code Execution

2021-03-24 11:33:21

patchstack

WordPress Huge-IT Video Gallery plugin <=2.0.4 - SQL Injection vulnerability

2017-05-24 00:00:00

archlinux

[ASA-201701-22] wordpress: multiple issues

2017-01-15 00:00:00

rapid7community

Metasploit Wrapup

2017-05-26 19:06:43

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for FEDORA:8D224602D540