PHPMailer PwnScriptum Remote Code Execution

Added: 01/05/2017 BID: 95108 Background PHPMailer is a PHP class used for sending email from PHP. It is used by many open-source projects, e.g., WordPress, Drupal, and Joomla. Problem PHPMailer class mailSend function is vulnerable to command injection due to failure to properly sanitize the...

PHPMailer Remote Code Execution Vulnerability (CNVD-2017-00052)

PHPMailer is a PHP class library for sending e-mail . A remote code execution vulnerability exists in versions of PHPMailer prior to 5.2.20, which can be bypassed due to a filter function used in official PHPMailer patches. A remote attacker can exploit this vulnerability to execute arbitrary cod...

PT-2016-4567 · Php +3 · Phpmailer +3

Name of the Vulnerable Software and Affected Versions: PHPMailer versions prior to 5.2.20 Description: The issue is related to the isMail transport in PHPMailer, where improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP might allow...