Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2020/05/27 4:37 p.m.94 views

Insufficient output escaping of attachment names in PHPMailer

Impact CWE-116: Incorrect output escaping. An attachment added like this note the double quote within the attachment name, which is entirely valid: $mail-addAttachment'/tmp/attachment.tmp', 'filename.html";.jpg'; Will result in a message containing these headers: Content-Type:...

7.5CVSS1.2AI score0.0378EPSS
SaveExploits1References12Affected Software1
Rows per page
Query Builder