FLAT-ZZRJR – Vulnerability | Fluid Attacks Database

Database

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
packagist	phpmailer/phpmailer	>=5.0.0 <5.2.20	5.2.20
alpine v3.2	php-phpmailer	=5.2.0-r0 \|\| >=0 <5.2.4-r0	5.2.4-r0
alpine v3.5	php5-phpmailer	=5.2.0-r0 \|\| =5.2.4-r0 \|\| >=0 <5.2.4-r1	5.2.4-r1
alpine v3.4	php5-phpmailer	=5.2.0-r0 \|\| >=0 <5.2.0-r1	5.2.0-r1
alpine v3.3	php-phpmailer	=5.2.0-r0 \|\| >=0 <5.2.4-r0	5.2.4-r0
alpm rolling_release	wordpress	>=4.7-1 <4.7.1-1	4.7.1-1

Aliases

1. CVE-2016-100452. NVD-2016-100453. OSV-2016-100454. OSV-ALPINE-2016-100455. GHSA-4pc3-96mx-wwc86. GCVE-2016-100457. SECURITY-CVE-2016-10045

References

1. https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-4pc3-96mx-wwc82. https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html3. https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2016-10045.yaml4. https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.205. https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities6. https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html7. https://www.exploit-db.com/exploits/409698. https://www.exploit-db.com/exploits/409869. https://www.exploit-db.com/exploits/4222110. http://openwall.com/lists/oss-security/2016/12/28/111. http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html12. http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html13. http://seclists.org/fulldisclosure/2016/Dec/8114. http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection15. https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmailer_arg_injection.rb

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.