CVE-2007-3215 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-3215
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3215

Description: PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/34818 SREASON http://securityreason.com/securityalert/2802 SAID Secunia Advisory: SA25755 Secunia Advisory: SA25626 Secunia Advisory: SA25758 MISC http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/ DEBIAN http://www.debian.org/security/2007/dsa-1315 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=517428&group_id=157374 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/471065/100/0/threaded BID 24417

Return to the previous page.