CVE-2016-10033
CVE-2016-10033
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
CVSS 9.8 · Critical · EPSS 99.7% · In KEV · Public exploit · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libphp-phpmailer Debian:12
- Affected ranges
- ECOSYSTEM: < 5.2.14+dfsg-2.1
Update to 5.2.14+dfsg-2.1
libphp-phpmailer Debian:13
- Affected ranges
- ECOSYSTEM: < 5.2.14+dfsg-2.1
Update to 5.2.14+dfsg-2.1
libphp-phpmailer Debian:14
- Affected ranges
- ECOSYSTEM: < 5.2.14+dfsg-2.1
Update to 5.2.14+dfsg-2.1
phpmailer/phpmailer Packagist
- Versions
- v5.2.10
- v5.2.11
- v5.2.12
- v5.2.13
- v5.2.14
- v5.2.15
- v5.2.16
- v5.2.17
- v5.2.2
- v5.2.4
- v5.2.5
- v5.2.6
- v5.2.7
- v5.2.8
- v5.2.9
- Affected ranges
- ECOSYSTEM: ≥ 5.0.0, < 5.2.18
Update to 5.2.18
libphp-phpmailer Ubuntu:Pro:16.04:LTS
- Versions
- 5.2.10+dfsg-1
- 5.2.14+dfsg-1
- 5.2.14+dfsg-1build1
- Affected ranges
- ECOSYSTEM: < 5.2.14+dfsg-1ubuntu0.1~esm1
Update to 5.2.14+dfsg-1ubuntu0.1~esm1
Original sources
- http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html
- https://www.drupal.org/psa-2016-004
- https://www.exploit-db.com/exploits/42221/
- https://www.exploit-db.com/exploits/40969/
- https://www.exploit-db.com/exploits/41962/
- https://www.exploit-db.com/exploits/40968/
- https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html
- https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18
- http://www.securityfocus.com/archive/1/539963/100/0/threaded
- https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities
- http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/40974/
- https://www.exploit-db.com/exploits/40986/
- https://www.exploit-db.com/exploits/40970/
- http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection
- https://www.exploit-db.com/exploits/41996/
- http://seclists.org/fulldisclosure/2016/Dec/78
- http://www.securityfocus.com/bid/95108
- http://www.securitytracker.com/id/1037533
- https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html
- https://www.exploit-db.com/exploits/42024/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10033
- https://nvd.nist.gov/vuln/detail/CVE-2016-10033