Lucene search
+L

66 matches found

OSV
OSV
added 2015/12/16 9:59 p.m.10 views

CVE-2015-8476

Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an 1 email address to the validateAddress function in class.phpmailer.php or 2 SMTP command to the sendCommand function in class.smtp.php, a different...

7.1AI score
SaveExploits0References8
OSV
OSV
added 2015/12/16 9:59 p.m.8 views

UBUNTU-CVE-2015-8476

Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an 1 email address to the validateAddress function in class.phpmailer.php or 2 SMTP command to the sendCommand function in class.smtp.php, a different...

5CVSS7.3AI score0.01988EPSS
SaveExploits0References3
RubySec
RubySec
added 2015/12/09 12:0 a.m.45 views

SMTP command injection

Net::SMTP is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring. Applications that validate email address format are not affected by this vulnerability. The injection attack is...

6.1CVSS6.9AI score0.03717EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2008/07/27 11:41 p.m.16 views

Sql injection

Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors...

10CVSS7.5AI score0.0266EPSS
SaveExploits0References6Affected Software1
securityvulns
securityvulns
added 2006/02/28 12:0 a.m.48 views

[ISecAuditors Advisories] IMAP/SMTP Injection in SquirrelMail

============================================= INTERNET SECURITY AUDITORS ALERT 2006-002 - Original release date: February 27, 2006 - Last revised: February 27, 2006 - Discovered by: Vicente Aguilera Diaz - Severity: 3/5 ============================================= I. VULNERABILITY...

5CVSS0.3AI score0.02351EPSS
SaveExploits1
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.13 views

CVE-2026-45067: Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address

More info at https://symfony.com/cve-2026-45067...

6.3CVSS5.8AI score0.00619EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder