Back to search
CVE-2015-8476
Published: Dec 16, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class.phpmailer.php or (2) SMTP command to the sendCommand function in class.smtp.php, a different vulnerability than CVE-2012-0796.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2015-39522bb8c9
vendor-advisory
x_refsource_FEDORA
[oss-security] 20151204 Re: CVE Request: PHPMailer Message Injection Vulnerability
mailing-list
x_refsource_MLIST
https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14
x_refsource_CONFIRM
DSA-3416
vendor-advisory
x_refsource_DEBIAN
FEDORA-2015-abf9659276
vendor-advisory
x_refsource_FEDORA
78619
vdb-entry
x_refsource_BID
[oss-security] 20151204 CVE Request: PHPMailer Message Injection Vulnerability
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now