CVE-2021-3603 Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer

PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called if such code is injected into the host project's scope by other means. If the $patternselect parameter to validateAddress is set to 'php' the default, defined by PHPMailer::$validator, and the globa...

Remote Code Execution (RCE)

phpmailer is vulnerable to remote code execution. The vulnerability exists due to insecure data allowed into the $langpath parameter of the setLanguage method...

PT-2021-3390 · Phpmailer +3 · Phpmailer +3

Name of the Vulnerable Software and Affected Versions: PHPMailer versions 6.4.1 and earlier Description: The issue is related to the validateAddress function in PHPMailer, which can lead to the execution of untrusted code if such code is injected into the host project's scope by other means. This...

PHPMailer < 6.5.0 RCE Vulnerability - Windows

PHPMailer is prone to a remote code execution RCE vulnerability on Windows. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

PHPMailer < 6.5.0 RCE Vulnerability

PHPMailer is prone to a remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2021-34551

PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...

CVE-2021-34551

PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...

Remote code execution

PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...

CVE-2021-34551

PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...

CVE-2021-34551

PHPMailer prior to version 6.5.0 on Windows is vulnerable to remote code execution if lang_path is supplied from untrusted data and uses a UNC pathname. The root cause is loading language/translation files in a way that could execute code. Exploitation status is not detailed in the provided docum...

CVE-2021-34551

PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...

PHPMailer 安全漏洞

PHPMailer is a PHP class library for sending emails. PHPMailer has a security vulnerability that can be exploited by remote attackers to execute arbitrary PHP code on the target system...

PHPMailer 代码问题漏洞

PHPMailer is a PHP class library for sending e-mail. A security vulnerability exists in PHPMailer that originates from untrusted data in a path with a UNC pathname, which can be exploited by an attacker to remotely execute code...

PT-2021-3321 · Phpmailer · Phpmailer

Name of the Vulnerable Software and Affected Versions: PHPMailer versions prior to 6.5.0 Description: The issue is related to errors in handling the lang path parameter in the setLanguage function of the PHPMailer library. This can allow a remote attacker to execute arbitrary code if the lang pat...

in phpmailer/phpmailer

✍️ Description validateAddress function used to validate email addresses, uses calluserfunc to call the callable from the name of callable provided to the function as an argument $patternselect. But if no argument is passed, the function sets "php" as default value to $patternselect variable on...

PHPMailer code issue vulnerability

PHPMailer is a PHP class library for sending emails. PHPMailer is vulnerable to a code issue that allows object injection via addAttachment with a UNC pathname via Phar deserialization. No details of the vulnerability are currently available...

WordPress Multiple Vulnerabilities (May 2021) - Linux

WordPress is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Vulnerabilities fixed in Wordpress

Wordpress has fixed two vulnerabilities in the standard included PHPMailer module. A remote malicious party can exploit the exploit the vulnerabilities to execute arbitrary code under the application's permissions, potentially gaining access gain access to sensitive information within the scope o...

WordPress Multiple Vulnerabilities (May 2021) - Windows

WordPress is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WordPress 3.7 to 5.7.1 - Object Injection in PHPMailer

Description WordPress versions 3.7 to 5.7.1 were using a vulnerable version of the PHPMailer library, which was affected by a PHP Object Injection vulnerability through Phar Deserialization via addAttachment with a UNC pathname. To fix the vulnerability the PHPMailer library was updated from...