Phpmailer Project vulnerabilities
We track 1 vulnerability in Phpmailer Project products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on December 30, 2016.
1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score
Latest Phpmailer Project vulnerabilities
- 9.8 Critical severity
PHPMailer Command Injection Exploited
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.