tocsin

Debian/libphp-phpmailer: unknown

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

Action: Upgrade libphp-phpmailer to 1.73-4 or later.

Affected

introducedfixedlast affected
01.73-4-

Fixed versions

1.73-4

Sources

published · modified · JSON