Skip to content
OpenAdvisories

Package · Packagist

phpmailer/phpmailer

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2017-11503 Public exploit

    Cross-site scripting in PHPMailer

    PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist
  • Medium 5.5
    CVE-2017-5223 Public exploit

    Local file disclosure in PHPMailer

    An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script…

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist
  • Medium —
    CVE-2006-5734

    PHPMailer Local file inclusion

    Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frame_toc.php and (b) documentation/common/search.php, the (2) req_lan…

    phpmailer/phpmailer Packagist