Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:4953
HistoryAug 23, 2017 - 8:09 a.m.

Remote Code Execution (RCE)

2017-08-2308:09:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.964

Percentile

99.6%

JSON

zend-mail is vulnerable to remote code execution (RCE) attacks. The library does not properly sanitize input, allowing a malicious user to inject and execute arbitrary code using a \\ character.

Related

prion 1
zdt 2
osv 2
mageia 1
exploitdb 3
f5 1
exploitpack 3
openvas 1
cvelist 1
hackerone 1
ubuntucve 1
nvd 1
github 1
cve 1
nessus 1
gentoo 1
thn 1
myhack58 1
threatpost 1
packetstorm 1
prion
prion
Command injection
2016-12-30 19:59:00
zdt
zdt
Zend Framework / zend-mail 2.4.11 - Remote Code Execution Exploit
2016-12-31 00:00:00
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit
2017-06-22 00:00:00
osv
osv
zend-mail remote code execution via Sendmail adapter
2022-05-14 02:19:49
CVE-2016-10034
2016-12-30 19:59:00
mageia
mageia
Updated php-ZendFramework2 packages fix security vulnerability
2017-01-13 13:32:16
exploitdb
exploitdb
Zend Framework / zend-mail &lt; 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer &lt; 5.2.20 / SwiftMailer &lt; 5.4.5-DEV / Zend Framework / zend-mail &lt; 2.4.11 - &#039;AIO&#039; &#039;PwnScriptum&#039; Remote Code Execution
2017-01-02 00:00:00
PHPMailer &lt; 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
f5
f5
K79502122 : Zend Framework vulnerability CVE-2016-10034
2017-01-16 00:00:00
exploitpack
exploitpack
Zend Framework zend-mail 2.4.11 - Remote Code Execution
2016-12-30 00:00:00
PHPMailer 5.2.20 with Exim MTA - Remote Code Execution
2017-06-21 00:00:00
PHPMailer 5.2.20 SwiftMailer 5.4.5-DEV Zend Framework zend-mail 2.4.11 - AIO PwnScriptum Remote Code Execution
2017-01-02 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0016)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2016-10034
2016-12-30 19:00:00
hackerone
hackerone
Paragon Initiative Enterprises: Directory Disclose,Email Disclose Zendmail vulnerability
2017-05-13 09:57:58
ubuntucve
ubuntucve
CVE-2016-10034
2016-12-30 00:00:00
nvd
nvd
CVE-2016-10034
2016-12-30 19:59:00
github
github
zend-mail remote code execution via Sendmail adapter
2022-05-14 02:19:49
cve
cve
CVE-2016-10034
2016-12-30 19:59:00
nessus
nessus
GLSA-201804-10 : Zend Framework: Multiple vulnerabilities
2018-04-10 00:00:00
gentoo
gentoo
Zend Framework: Multiple vulnerabilities
2018-04-09 00:00:00
thn
thn
Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail
2017-01-02 23:45:00
myhack58
myhack58
PhpMailer and SwiftMailer, the ZendMail successive exposure of the RCE high-risk vulnerabilities, affecting millions of Web servers-vulnerability warning-the black bar safety net
2017-01-05 00:00:00
threatpost
threatpost
PHPMailer, SwiftMailer Updates Resolve Critical Remote Code Execution Vulnerabilities
2016-12-29 14:20:38
packetstorm
packetstorm
PHPMailer / Zend-mail / SwiftMailer Remote Code Execution
2017-01-03 00:00:00

EPSS

0.964

Percentile

99.6%

JSON
Related for VERACODE:4953
prion1zdt2osv2mageia1exploitdb3f51exploitpack3openvas1cvelist1hackerone1ubuntucve1nvd1github1cve1nessus1gentoo1thn1myhack581threatpost1packetstorm1