{"action":"Upgrade phpmailer/phpmailer to 1.7.4 or later.","affected":[{"fixed":"1.7.4","introduced":"0"}],"component":"phpmailer/phpmailer","cve_ids":["CVE-2007-3215"],"ecosystem":"Packagist","epss":0.02407,"exploited":false,"fixed_versions":["1.7.4"],"ghsa_id":"GHSA-6h78-85v2-mmch","id":"tcs_01M5KEX3135Z036Z3DWAW92TXD","modified_at":"2024-02-02T20:58:49.494723Z","published_at":"2024-02-02T20:43:55Z","references":["https://osv.dev/vulnerability/GHSA-6h78-85v2-mmch","https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-6h78-85v2-mmch","https://cxsecurity.com/issue/WLB-2007060063","https://exchange.xforce.ibmcloud.com/vulnerabilities/34818","https://github.com/PHPMailer/PHPMailer","https://seclists.org/fulldisclosure/2011/Oct/223","https://sourceforge.net/p/phpmailer/bugs/192","https://web.archive.org/web/20070714054359/http://larholm.com/2007/06/11/phpmailer-0day-remote-execution","https://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-6h78-85v2-mmch","url":"https://osv.dev/vulnerability/GHSA-6h78-85v2-mmch"}],"summary":"PHPMailer Shell command injection"}