CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-12-30
PHPMailer < 5.2.18 Remote Code Execution (RCE) and Argument Injection Vulnerability (CVE-2016-10033)
[Affected Scope] All PHP web applications utilizing PHPMailer versions prior to 5.2.18
[Impact] Remote attackers can exploit the vulnerability to execute arbitrary code on the target server by manipulating the Sender (From) field
[Mitigation] Immediately upgrade the PHPMailer library to the latest stable version (5.2.18 or higher)