Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-V5C9-MMW9-829Q
HistoryMay 14, 2022 - 2:39 a.m.

PHPMailer susceptible to arbitrary code execution

2022-05-1402:39:43
CWE-94
GitHub Advisory Database
github.com
23

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.886 High

EPSS

Percentile

98.7%

JSON

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.

CPENameOperatorVersion
phpmailer/phpmailerlt5.2.10

Related

packetstorm 2
exploitpack 2
seebug 4
ubuntucve 1
dsquare 1
nessus 5
openvas 13
osv 1
securityvulns 2
freebsd 1
cve 1
debiancve 1
checkpoint_advisories 1
canvas 1
prion 1
exploitdb 2
ubuntu 1
packetstorm
packetstorm
RoundCube Webmail 0.2-3 Beta Code Execution
2008-12-30 00:00:00
RoundCube Webmail 0.2b Remote Code Execution
2008-12-30 00:00:00
exploitpack
exploitpack
Roundcube Webmail 0.2b - Remote Code Execution
2008-12-22 00:00:00
Roundcube Webmail 0.2-3 Beta - Code Execution
2008-12-22 00:00:00
seebug
seebug
RoundCube Webmail <= 0.2-3 beta Code Execution Vulnerability
2008-12-23 00:00:00
RoundCube Webmail <= 0.2b Remote Code Execution Exploit
2014-07-01 00:00:00
RoundCube Webmail <= 0.2-3 beta Code Execution Vulnerability
2014-07-01 00:00:00
ubuntucve
ubuntucve
CVE-2008-5619
2008-12-17 00:00:00
dsquare
dsquare
Roundcube 0.2beta RCE
2012-01-31 00:00:00
nessus
nessus
Fedora 9 : roundcubemail-0.2-4.beta.fc9 (2008-11234)
2008-12-15 00:00:00
Fedora 8 : roundcubemail-0.2-4.beta.fc8 (2008-11220)
2008-12-15 00:00:00
FreeBSD : roundcube -- remote execution of arbitrary code (8f483746-d45d-11dd-84ec-001fc66e7203)
2009-01-02 00:00:00
openvas
openvas
Fedora Update for roundcubemail FEDORA-2008-11220
2009-02-13 00:00:00
FreeBSD Ports: roundcube
2009-01-02 00:00:00
Fedora Update for roundcubemail FEDORA-2008-11234
2009-02-13 00:00:00
osv
osv
PHPMailer susceptible to arbitrary code execution
2022-05-14 02:39:43
securityvulns
securityvulns
POC for CVE-2008-5619 &#40;roundcubemail PHP arbitrary code injection&#41;
2008-12-23 00:00:00
Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2008-12-23 00:00:00
freebsd
freebsd
roundcube -- remote execution of arbitrary code
2008-12-12 00:00:00
cve
cve
CVE-2008-5619
2008-12-17 02:30:00
debiancve
debiancve
CVE-2008-5619
2008-12-17 02:30:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Roundcubemail PHP Arbitrary Code Injection
2009-01-15 00:00:00
canvas
canvas
Immunity Canvas: ROUNDCUBE
2008-12-17 02:30:00
prion
prion
Hardcoded credentials
2008-12-17 02:30:00
exploitdb
exploitdb
Roundcube Webmail 0.2-3 Beta - Code Execution
2008-12-22 00:00:00
Roundcube Webmail 0.2b - Remote Code Execution
2008-12-22 00:00:00
ubuntu
ubuntu
Moodle vulnerabilities
2009-06-24 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.886 High

EPSS

Percentile

98.7%

JSON
Related for GHSA-V5C9-MMW9-829Q
packetstorm2exploitpack2seebug4ubuntucve1dsquare1nessus5openvas13osv1securityvulns2freebsd1cve1debiancve1checkpoint_advisories1canvas1prion1exploitdb2ubuntu1