CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

References

Affected packages

Git / github.com/phpmailer/phpmailer

Affected ranges

Type

GIT

Repo

https://github.com/phpmailer/phpmailer

Events

Introduced

Fixed

ed4e7ce8ad877a8f578139c491c256ab1933c7c9

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.2.18"
        }
    ]
}

Type

GIT

Repo

https://github.com/wordpress/wordpress

Events

Introduced

Last affected

14247ee4302378d292863865c643abe99bbfe3c7

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.7"
        }
    ]
}

Affected versions

v2.*

v2.2.1

v5.*

v5.2.0

v5.2.1

v5.2.10

v5.2.11

v5.2.12

v5.2.13

v5.2.14

v5.2.15

v5.2.16

v5.2.17

v5.2.2

v5.2.4

v5.2.5

v5.2.6

v5.2.7

v5.2.8

v5.2.9

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "1.5.0"
            },
            {
                "last_affected": "3.6.5"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10033.json"