phpmailer/phpmailer Security Advisories (14)
-
[MEDIUM] PHPMailer Local file inclusion
PKSA-fj53-yfyr-yhvw CVE-2006-5734 GHSA-8jc3-5p29-qgjx
Affected version: <5.2.0
Reported by:
GitHub -
[HIGH] PHPMailer Shell command injection
PKSA-9bp1-x16y-sg9x CVE-2007-3215 GHSA-6h78-85v2-mmch
Affected version: <1.7.4
Reported by:
GitHub -
[HIGH] PHPMailer vulnerable to email header injection
PKSA-scjs-h9fx-yz57 CVE-2012-0796 GHSA-398j-f7m7-795j
Affected version: <2.2.1
Reported by:
GitHub -
[HIGH] PHPMailer susceptible to arbitrary code execution
PKSA-rh9h-fj14-12r3 CVE-2008-5619 GHSA-v5c9-mmw9-829q
Affected version: <5.2.10
Reported by:
GitHub -
[HIGH] RCE affecting Windows hosts via UNC paths to translation files
PKSA-35kn-2ddp-d3p4 CVE-2021-34551 GHSA-7q44-r25x-wm4q
Affected version: <6.5.0
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[LOW] Untrusted code may be run from an overridden address validator
PKSA-m8by-bb7v-7qt5 CVE-2021-3603 GHSA-77mr-wc79-m8j3
Affected version: <6.5.0
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[CRITICAL] Object injection via local phar file
PKSA-1pdn-z57v-5nzg CVE-2020-36326 GHSA-m298-fh5c-jc66
Affected version: >=6.1.8,<6.4.1
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[HIGH] Insufficient output escaping of attachment names in PHPMailer
PKSA-8sw7-9x88-c8bx CVE-2020-13625 GHSA-f7hx-fqxw-rvvj
Affected version: <6.1.6
Reported by:
GitHub -
[MEDIUM] XSS vulnerability in code example
PKSA-g8hj-dw43-q8td CVE-2017-11503 GHSA-58mj-pw57-4vm2
Affected version: >=5.0.0,<5.2.24
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[HIGH] Object injection
PKSA-dn5d-4vy3-wsfy CVE-2018-19296 GHSA-7w4p-72j7-v7c2
Affected version: >=5.0.0,<5.2.27|>=6.0.0,<6.0.6
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[CRITICAL] Remote Code Execution
PKSA-y9zp-7yqg-8bmt CVE-2016-10045 GHSA-4pc3-96mx-wwc8
Affected version: >=5.0.0,<5.2.20
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[CRITICAL] Remote Code Execution
PKSA-mjxt-24k3-8rt7 CVE-2016-10033 GHSA-5f37-gxvh-23v6
Affected version: >=5.0.0,<5.2.18
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] Local File Disclosure
PKSA-5nj1-dvnw-7cyx CVE-2017-5223 GHSA-4x5h-cr29-fhp6
Affected version: >=5.0.0,<5.2.22
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[LOW] Multiple CRLF injection vulnerabilities
PKSA-nm9v-1tjm-2cvc CVE-2015-8476 GHSA-738m-f33v-qc2r
Affected version: >=5.0.0,<5.2.14
Reported by:
GitHub, FriendsOfPHP/security-advisories