QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-10034

Back to search

CVE-2016-10034

Published: Dec 30, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-201804-10
vendor-advisory
x_refsource_GENTOO
42221
exploit
x_refsource_EXPLOIT-DB
40979
exploit
x_refsource_EXPLOIT-DB
1037539
vdb-entry
x_refsource_SECTRACK
40986
exploit
x_refsource_EXPLOIT-DB
95144
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2016-10034 - Security Vulnerability | QwikSec