Lucene search
+L

10 matches found

OSV
OSV
added 2024/06/07 9:19 p.m.26 views

GHSA-CXF7-M5G2-V594 Zend-Mail remote code execution in zend-mail via Sendmail adapter

When using the zend-mail component to send email via the Zend\Mail\Transport\Sendmail transport, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters within an address; when unsanitized, they c...

8.8CVSS7AI score
SaveExploits0References6
Rows per page
Query Builder