Critical 1 exploited CVE DSA-3750-1 1 CVE

libphp-phpmailer - security update

Published Dec 31, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	libphp-phpmailer	5.2.9+dfsg-2+deb8u2

Vulnerabilities 1

Critical 9.8

CVE-2016-10033 Exploited Public exploit Scanner template EPSS 100%

Remote code execution in PHPMailer

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

phpmailer/phpmailer libphp-phpmailer libphp-phpmailer php5-phpmailer Debian Ubuntu Alpine Packagist

Dec 30, 2016
KEV Jul 7, 2025