Unscored DLA-363-1 1 CVE

libphp-phpmailer - security update

Published Dec 8, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	libphp-phpmailer	5.1-1+deb6u11

Vulnerabilities 1

Low —

CVE-2015-8476

SMTP Injection in PHPMailer

Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class.phpmailer.php or (2) SMTP command to the sendCommand funct…

phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist

Dec 16, 2015