Phpmailer vulnerabilities

1 known vulnerability in Phpmailer from Phpmailer Project. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  PHPMailer Command Injection Exploited

  CVE-2016-10033Dec 30, 2016Phpmailer ProjectEPSS 99.7%

  The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.