Package · Ubuntu

libphp-phpmailer

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.1

CVE-2021-3603

Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer

PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means). If the $patternselect parameter to validateAddress() is set to 'php' (the default, defi…

PHPMailer PHPMailer phpmailer/phpmailer libphp-phpmailer Debian Ubuntu Packagist

Jun 17, 2021
High 7.5

CVE-2020-13625

Insufficient output escaping of attachment names in PHPMailer

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.

cacti phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Alpine Packagist

Jun 8, 2020
High 8.8

CVE-2018-19296

Phar object injection in PHPMailer

PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.

phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist

Nov 16, 2018