Lucene search

SMTP Injection in PHPMailer

🗓️ 05 Mar 2020 22:19:09Reported by GitHub Advisory DatabaseType

SMTP Injection in PHPMailer. Arbitrary SMTP commands can be injected via email addresses containing line breaks

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 28
Tenable Nessus	Fedora 22 : php-PHPMailer-5.2.14-1.fc22 (2015-39522bb8c9)	4 Mar 201600:00	–	nessus
Tenable Nessus	Debian DSA-3416-1 : libphp-phpmailer - security update	14 Dec 201500:00	–	nessus
Tenable Nessus	Debian DLA-363-1 : libphp-phpmailer security update	9 Dec 201500:00	–	nessus
Tenable Nessus	Fedora 23 : php-PHPMailer-5.2.14-1.fc23 (2015-abf9659276)	4 Mar 201600:00	–	nessus
Fedora	[SECURITY] Fedora 22 Update: php-PHPMailer-5.2.14-1.fc22	11 Feb 201613:49	–	fedora
Fedora	[SECURITY] Fedora 23 Update: php-PHPMailer-5.2.14-1.fc23	11 Feb 201613:24	–	fedora
Debian	[SECURITY] [DSA 3416-1] libphp-phpmailer security update	13 Dec 201519:11	–	debian
Debian	[SECURITY] [DSA 3416-1] libphp-phpmailer security update	13 Dec 201519:11	–	debian
Debian	[SECURITY] [DLA 363-1] libphp-phpmailer security update	8 Dec 201518:35	–	debian
OpenVAS	Fedora Update for php-PHPMailer FEDORA-2015-39522	12 Feb 201600:00	–	openvas

Vulners

Node

phpmailer phpmailerRange5.0.0–5.2.14

Source	Link
github	www.github.com/PHPMailer/PHPMailer/security/advisories/GHSA-738m-f33v-qc2r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-8476
github	www.github.com/PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2015-8476.yaml
github	www.github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/177130.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/177139.html
debian	www.debian.org/security/2015/dsa-3416
openwall	www.openwall.com/lists/oss-security/2015/12/04/5
openwall	www.openwall.com/lists/oss-security/2015/12/05/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Mar 2020 22:09Current

9High risk

Vulners AI Score9

CVSS25

EPSS0.01114

CWE-20