Description

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.

Remediation

References

CVE-2016-10045

Related Vulnerabilities

WebLogic CVE-2017-10063 Vulnerability (CVE-2017-10063)

Oracle Database Server CVE-2006-0258 Vulnerability (CVE-2006-0258)

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-39193)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44949)

Joomla! Core 1.5.x Session Fixation (1.5.0 - 1.5.15)

Severity

Critical

Classification

CVE-2016-10045 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities