Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-k96h-dr15-ufhv
|
PHPMailer Shell command injection
PHPMailer before 1.7.4, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in `class.phpmailer.php`.
### Impact
Shell command injection, remotely exploitable if host application does not filter user data appropriately.
### Patches
Fixed in 1.7.4
### Workarounds
Filter and validate user-supplied data before putting in the into the `Sender` property.
### References
https://nvd.nist.gov/vuln/detail/CVE-2007-3215
### For more information
If you have any questions or comments about this advisory:
* Open a private issue in [the PHPMailer project](https://github.com/PHPMailer/PHPMailer)
|
CVE-2007-3215
GHSA-6h78-85v2-mmch
|