Lucene search
Veracode Vulnerability DatabaseVERACODE:5441HistoryNov 16, 2017 - 10:34 a.m.
Remote Code Execution (RCE)
2017-11-1610:34:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
EPSS
0.146
Percentile
95.8%
zetacomponents/mail is vulnerable to remote code execution (RCE) attacks. The attacks can be launched using a malicious email address (for example: -X/path/to/wwwroot/file.php) since the application does not restrict the set of characters used in ezcMail returnPath property.
Related
exploitdb
exploitdb
Zeta Components Mail 1.8.1 - Remote Code Execution
2017-11-16 00:00:00
github
github
Zeta Components Mail Arbitrary code execution via a crafted email address
2022-05-17 00:18:44
prion
prion
Code injection
2017-11-15 16:29:00
friendsofphp
friendsofphp
Arbitrary code execution via a crafted email address
2017-11-01 19:02:00
Arbitrary code execution via a crafted email address
2017-11-01 19:02:00
zdt
zdt
Zeta Components Mail 1.8.1 - Remote Code Execution Vulnerability
2017-11-16 00:00:00
osv
osv
Zeta Components Mail Arbitrary code execution via a crafted email address
2022-05-17 00:18:44
CVE-2017-15806
2017-11-15 16:29:00
cve
cve
CVE-2017-15806
2017-11-15 16:29:00
exploitpack
exploitpack
Zeta Components Mail 1.8.1 - Remote Code Execution
2017-11-16 00:00:00
cvelist
cvelist
CVE-2017-15806
2017-11-15 16:00:00
nvd
nvd
CVE-2017-15806
2017-11-15 16:29:00