Skip to content
OpenAdvisories

Package · Packagist

zendframework/zend-mail

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    GHSA-cxf7-m5g2-v594

    Zend-Mail remote code execution in zend-mail via Sendmail adapter

    When using the zend-mail component to send email via the `Zend\Mail\Transport\Sendmail` transport, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters wit…

    zendframework/zend-mail Packagist
  • Critical 9.8
    CVE-2016-10034 Public exploit EPSS 38%

    zend-mail remote code execution via Sendmail adapter

    The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute ar…

    zendframework/zend-mail Packagist