Lucene search
+L

11 matches found

Kitploit
Kitploit
added 2026/09/06 6:47 p.m.5 views

exploit-CVE-2016-10034

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

9.8CVSS8.5AI score0.99714EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/06 3:17 p.m.5 views

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

9.8CVSS7.4AI score0.99714EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/09/06 11:34 a.m.7 views

exploit-CVE-2016-10033

PHPMailer 5.2.18 تنفيذ كود عن بُعد PHPMailer هي الفئة الأكثر شعبية في العالم لإرسال البريد الإلكتروني، حيث يُقدَّر عدد مستخدميها بنحو 9 ملايين مستخدم حول العالم. وتستمر التنزيلات بوتيرة كبيرة يوميًا. تُستخدم في العديد من المشاريع مفتوحة المصدر: WordPress وDrupal و1CRM وSugarCRM وYii وJoomla! وغير...

9.8CVSS7.3AI score0.99714EPSS
SaveExploits58References3
BDU FSTEC
BDU FSTEC
added 2025/09/24 12:00 a.m.8 views

The vulnerability of the mailSend function in the PHPMailer library, which allows a hacker to execute arbitrary code.

The vulnerability of the mailSend function in the PHPMailer library relates to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.4AI score0.99714EPSS
SaveExploits58References8Affected Software2
Github Security Blog
Github Security Blog
added 2020/03/05 10:09 p.m.244 views

Remote code execution in PHPMailer

Impact The mailSend function in the default isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property. Patches Fixed in 5.2.18 Workaround...

9.8CVSS3.9AI score0.99714EPSS
SaveExploits58References23Affected Software1
NVD
NVD
added 2016/12/30 7:59 p.m.36 views

CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property...

9.8CVSS9.8AI score0.99714EPSS
SaveExploits58References22
Vulnrichment
Vulnrichment
added 2016/12/30 7:00 p.m.14 views

CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property...

8.4AI score0.99714EPSS
SaveExploits58References21
Cvelist
Cvelist
added 2016/12/30 7:00 p.m.59 views

CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property...

9.9AI score0.99714EPSS
SaveExploits58References21
CVE
CVE
added 2016/12/30 7:00 p.m.841 views

CVE-2016-10033

PHPMailer CVE-2016-10033 affects the isMail transport in PHPMailer prior to 5.2.18, where an attacker can craft the Sender property to inject an extra parameter to the mail() call and achieve remote code execution on the web server. Related entries note the issue as a fix in PHPMailer versions 5....

9.8CVSS9.8AI score0.99714EPSS
SaveIn wildExploits58References22Affected Software1
Debian CVE
Debian CVE
added 2016/12/30 7:00 p.m.70 views

CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property...

9.8CVSS8.7AI score0.99714EPSS
SaveExploits58
ATTACKERKB
ATTACKERKB
added 2016/12/30 12:00 a.m.234 views

CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \” backslash double quote in a crafted Sender property. Recent assessments: Assessed Attacker Value: 0...

9.8CVSS9.9AI score0.99714EPSS
SaveIn wildExploits59References31
Rows per page
Query Builder