oss-sec mailing list archives

Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033]

From: Peter Bex <peter () more-magic net>
Date: Mon, 26 Dec 2016 15:59:44 +0100

On Mon, Dec 26, 2016 at 03:55:59PM +0100, Peter Bex wrote:

The LCMS system Chamilo also uses PHPMailer for sending mails internally.


Correction: Older versions of Chamilo (up to and including 1.9) used it.
The current release (1.11) seems to use Swiftmailer.

Cheers,
Peter Bex

Attachment: signature.asc
Description: Digital signature

Current thread:

PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Dawid Golunski (Dec 25)
- Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Hanno Böck (Dec 26)
  - Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Peter Bex (Dec 26)
    - Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Peter Bex (Dec 26)
    - Re: [security] [oss-security] PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Michael Hess (Dec 26)
    - Re: [security] [oss-security] PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Yannick Warnier (Dec 26)
- Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Tracy Reed (Dec 26)
  - Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Michael Hess (Dec 27)
  - Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Florian Pritz (Dec 27)
  - Re: PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033] Dawid Golunski (Dec 27)