Lucene search
MitreCVELIST:CVE-2016-10074HistoryDec 30, 2016 - 7:00 p.m.
CVE-2016-10074
2016-12-3019:00:00
mitre
www.cve.org
1
The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " (backslash double quote) in a crafted e-mail address in the (1) From, (2) ReturnPath, or (3) Sender header.
References
packetstormsecurity.com/files/140290/SwiftMailer-Remote-Code-Execution.html
seclists.org/fulldisclosure/2016/Dec/86
www.debian.org/security/2017/dsa-3769
www.securityfocus.com/bid/95140
github.com/swiftmailer/swiftmailer/blob/5.x/CHANGES
legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.html
www.exploit-db.com/exploits/40972/
www.exploit-db.com/exploits/40986/
www.exploit-db.com/exploits/42221/
Related
saint
saint
Swift Mailer PwnScriptum Command Injection
2017-01-17 00:00:00
Swift Mailer PwnScriptum Command Injection
2017-01-17 00:00:00
Swift Mailer PwnScriptum Command Injection
2017-01-17 00:00:00
nessus
nessus
Debian DSA-3769-1 : libphp-swiftmailer - security update
2017-01-23 00:00:00
Fedora 25 : php-swiftmailer (2016-f7ef82c1b4)
2017-01-10 00:00:00
Fedora 24 : php-swiftmailer (2016-b65e546846)
2017-01-10 00:00:00
osv
osv
libphp-swiftmailer - security update
2017-01-22 00:00:00
libphp-swiftmailer - security update
2017-01-19 00:00:00
Flow Swift Mailer package Remote code execution
2024-05-17 23:06:50
openvas
openvas
SwiftMailer RCE Vulnerability
2016-12-29 00:00:00
Debian: Security Advisory (DLA-792-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3769-1)
2017-01-21 00:00:00
debian
debian
[SECURITY] [DSA 3769-1] libphp-swiftmailer security update
2017-01-22 10:43:02
[SECURITY] [DSA 3769-1] libphp-swiftmailer security update
2017-01-22 10:43:02
[SECURITY] [DLA 792-1] libphp-swiftmailer security update
2017-01-19 18:51:46
f5
f5
K46057232 : Swift Mailer vulnerability CVE-2016-10074
2017-02-14 00:00:00
typo3
typo3
Remote Code Execution in third party library swiftmailer
2017-01-03 00:00:00
debiancve
debiancve
CVE-2016-10074
2016-12-30 19:59:00
packetstorm
packetstorm
SwiftMailer Remote Code Execution
2016-12-29 00:00:00
WordPress Core 4.6 Unauthenticated Remote Code Execution
2017-05-05 00:00:00
SquirrelMail 1.4.22 Remote Code Execution
2017-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: php-swiftmailer-5.4.5-1.fc25
2017-01-09 00:59:18
[SECURITY] Fedora 24 Update: php-swiftmailer-5.4.5-1.fc24
2017-01-09 01:22:20
prion
prion
Command injection
2016-12-30 19:59:00
veracode
veracode
Arbitrary Code Execution
2018-05-10 03:25:41
nvd
nvd
CVE-2016-10074
2016-12-30 19:59:00
zdt
zdt
SwiftMailer 5.4.5-DEV - Remote Code Execution Exploit
2016-12-29 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit
2017-06-22 00:00:00
github
github
Flow Swift Mailer package Remote code execution
2024-05-17 23:06:50
Swift Mailer mail transport Command Injection
2022-05-17 00:27:49
exploitpack
exploitpack
SwiftMailer 5.4.5-DEV - Remote Code Execution
2016-12-28 00:00:00
PHPMailer 5.2.20 SwiftMailer 5.4.5-DEV Zend Framework zend-mail 2.4.11 - AIO PwnScriptum Remote Code Execution
2017-01-02 00:00:00
PHPMailer 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
cve
cve
CVE-2016-10074
2016-12-30 19:59:00
friendsofphp
friendsofphp
Remote Code Execution when using the mail transport
2016-12-29 10:01:58
ubuntucve
ubuntucve
CVE-2016-10074
2016-12-30 00:00:00
exploitdb
exploitdb
SwiftMailer < 5.4.5-DEV - Remote Code Execution
2016-12-28 00:00:00
PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - 'AIO' 'PwnScriptum' Remote Code Execution
2017-01-02 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
seebug
seebug
SwiftMailer <= 5.4.5-DEV Remote Code Execution (CVE-2016-10074)
2016-12-30 00:00:00
WordPress Core 4.6 - Unauthenticated Remote Code Execution
2017-05-04 00:00:00
thn
thn
Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail
2017-01-02 23:45:00
threatpost
threatpost
