libphp-phpmailer

4 results · Clear filters · Feed

• High 8.1
  CVE-2021-3603

  Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer

  PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means). If the $patternselect parameter to validateAddress() is set to 'php' (the default, defi…

  PHPMailer PHPMailer phpmailer/phpmailer libphp-phpmailer Debian Ubuntu Packagist
  Jun 17, 2021
• High 7.5
  CVE-2020-13625

  Insufficient output escaping of attachment names in PHPMailer

  PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.

  cacti phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Alpine Packagist
  Jun 8, 2020
• High 8.8
  CVE-2018-19296

  Phar object injection in PHPMailer

  PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.

  phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist
  Nov 16, 2018
• High —
  CVE-2007-3215

  PHPMailer Shell command injection

  PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

  wordpress phpmailer/phpmailer libphp-phpmailer Debian Packagist
  Jun 14, 2007