Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-R9MW-GWX9-V3H5
HistoryMay 14, 2022 - 2:19 a.m.

zend-mail remote code execution via Sendmail adapter

2022-05-1402:19:49
Google
osv.dev
3

7.7 High

AI Score

Confidence

Low

0.964 High

EPSS

Percentile

99.6%

JSON

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " (backslash double quote) in a crafted e-mail address.

Related

zdt 2
veracode 1
prion 1
mageia 1
hackerone 1
f5 1
exploitpack 3
openvas 1
cvelist 1
cve 1
ubuntucve 1
osv 1
github 1
nvd 1
exploitdb 3
gentoo 1
nessus 1
packetstorm 1
myhack58 1
threatpost 1
thn 1
zdt
zdt
Zend Framework / zend-mail 2.4.11 - Remote Code Execution Exploit
2016-12-31 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit
2017-06-22 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2017-08-23 08:09:52
prion
prion
Command injection
2016-12-30 19:59:00
mageia
mageia
Updated php-ZendFramework2 packages fix security vulnerability
2017-01-13 13:32:16
hackerone
hackerone
Paragon Initiative Enterprises: Directory Disclose,Email Disclose Zendmail vulnerability
2017-05-13 09:57:58
f5
f5
K79502122 : Zend Framework vulnerability CVE-2016-10034
2017-01-16 00:00:00
exploitpack
exploitpack
Zend Framework zend-mail 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
PHPMailer 5.2.20 SwiftMailer 5.4.5-DEV Zend Framework zend-mail 2.4.11 - AIO PwnScriptum Remote Code Execution
2017-01-02 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0016)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2016-10034
2016-12-30 19:00:00
cve
cve
CVE-2016-10034
2016-12-30 19:59:00
ubuntucve
ubuntucve
CVE-2016-10034
2016-12-30 00:00:00
osv
osv
CVE-2016-10034
2016-12-30 19:59:00
github
github
zend-mail remote code execution via Sendmail adapter
2022-05-14 02:19:49
nvd
nvd
CVE-2016-10034
2016-12-30 19:59:00
exploitdb
exploitdb
Zend Framework / zend-mail &lt; 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer &lt; 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
PHPMailer &lt; 5.2.20 / SwiftMailer &lt; 5.4.5-DEV / Zend Framework / zend-mail &lt; 2.4.11 - &#039;AIO&#039; &#039;PwnScriptum&#039; Remote Code Execution
2017-01-02 00:00:00
gentoo
gentoo
Zend Framework: Multiple vulnerabilities
2018-04-09 00:00:00
nessus
nessus
GLSA-201804-10 : Zend Framework: Multiple vulnerabilities
2018-04-10 00:00:00
packetstorm
packetstorm
PHPMailer / Zend-mail / SwiftMailer Remote Code Execution
2017-01-03 00:00:00
myhack58
myhack58
PhpMailer and SwiftMailer, the ZendMail successive exposure of the RCE high-risk vulnerabilities, affecting millions of Web servers-vulnerability warning-the black bar safety net
2017-01-05 00:00:00
threatpost
threatpost
PHPMailer, SwiftMailer Updates Resolve Critical Remote Code Execution Vulnerabilities
2016-12-29 14:20:38
thn
thn
Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail
2017-01-02 23:45:00

7.7 High

AI Score

Confidence

Low

0.964 High

EPSS

Percentile

99.6%

JSON
Related for OSV:GHSA-R9MW-GWX9-V3H5
zdt2veracode1prion1mageia1hackerone1f51exploitpack3openvas1cvelist1cve1ubuntucve1osv1github1nvd1exploitdb3gentoo1nessus1packetstorm1myhack581threatpost1thn1