Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2023/11/05 9:30 p.m.19 views

Magnesium-PHP Injection vulnerability

UNSUPPORTED WHEN ASSIGNED UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection...

9.8CVSS9.9AI score0.00085EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2023/11/05 9:30 p.m.12 views

GHSA-8PP6-5QPW-85G3 Magnesium-PHP Injection vulnerability

UNSUPPORTED WHEN ASSIGNED UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection...

3.5CVSS6.9AI score0.00085EPSS
Exploits0References6
Cvelist
Cvelist
added 2023/11/05 8:31 p.m.18 views

CVE-2017-20187 Magnesium-PHP Base.php formatEmailString injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3....

3.5CVSS10AI score0.00085EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/11/05 8:31 p.m.8 views

CVE-2017-20187 Magnesium-PHP Base.php formatEmailString injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3....

3.5CVSS7.5AI score0.00085EPSS
Exploits0References4
CVE
CVE
added 2023/11/05 8:31 p.m.60 views

CVE-2017-20187

Magnesium-PHP prior to 0.3.1 is affected by CVE-2017-20187. The issue resides in the function formatEmailString in src/Magnesium/Message/Base.php, where manipulation of the arguments email/name leads to injection. A fix is available in version 0.3.1 (patch 500d340e1f6421007413cc08a8383475221c2604...

9.8CVSS7AI score0.00085EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder