Description

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

Remediation

References

CVE-2016-10033

Related Vulnerabilities

jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11023)

Joomla! Core 3.4.x Cross-Site Scripting (3.4.0 - 3.4.3)

Oracle Database Server Cryptographic Issues Vulnerability (CVE-2006-0270)

Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20400)

WordPress Plugin W3 Total Cache Multiple Unspecified Vulnerabilities (0.9.5.1)

Severity

Critical

Classification

CVE-2016-10033 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities