EUVD-2021-1277

Malware in sbrugna...

The vulnerability of the validateAddress function in the PHPMailer library allows a hacker to execute arbitrary code.

The vulnerability of the validateAddress function in the PHPMailer library is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

UBUNTU-CVE-2021-3603

PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called if such code is injected into the host project's scope by other means. If the $patternselect parameter to validateAddress is set to 'php' the default, defined by PHPMailer::$validator, and the globa...