جزئیات آسیب‌پذیری

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

• http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html x_refsource_MISC
• https://www.drupal.org/psa-2016-004 x_refsource_CONFIRM
• https://www.exploit-db.com/exploits/42221/ exploitx_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/40969/ exploitx_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/41962/ exploitx_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/40968/ exploitx_refsource_EXPLOIT-DB
• https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html x_refsource_MISC
• https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18 x_refsource_CONFIRM
• http://www.securityfocus.com/archive/1/539963/100/0/threaded mailing-listx_refsource_BUGTRAQ
• https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities x_refsource_CONFIRM
• http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html x_refsource_MISC
• https://www.exploit-db.com/exploits/40974/ exploitx_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/40986/ exploitx_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/40970/ exploitx_refsource_EXPLOIT-DB
• http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection x_refsource_MISC
• https://www.exploit-db.com/exploits/41996/ exploitx_refsource_EXPLOIT-DB
• http://seclists.org/fulldisclosure/2016/Dec/78 mailing-listx_refsource_FULLDISC
• http://www.securityfocus.com/bid/95108 vdb-entryx_refsource_BID
• http://www.securitytracker.com/id/1037533 vdb-entryx_refsource_SECTRACK
• https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html x_refsource_CONFIRM
• https://www.exploit-db.com/exploits/42024/ exploitx_refsource_EXPLOIT-DB
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10033 government-resource