DeutschShown in its original language — a full translation is planned for a future version.
PHPMailer: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2021-06-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHPMailer ausnutzen, um beliebigen Programmcode auszuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3603US | high8.1 | — | ||
PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means). If the $… | ||||
| CVE-2021-34551US | high8.1 | — | ||
PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname. | ||||
02
references
External citations — patches, advisories, analysis.
- National Vulnerability Database CVE-2021-34551 vom 2021-06-17external
- National Vulnerability Database CVE-2021-3603 vom 2021-06-17external
- Ubuntu Security Notice USN-5956-1 vom 2023-03-15external
- Ubuntu Security Notice USN-5956-2 vom 2023-03-15external
- WID-SEC-W-2023-0663 - CSAF Versionself
- WID-SEC-2023-0663 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan