Skip to content
OpenAdvisories

Package · Packagist

zendframework/zend-mail

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Zend-Mail remote code execution in zend-mail via Sendmail adapter

    When using the zend-mail component to send email via the `Zend\Mail\Transport\Sendmail` transport, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters wit…