6.8med
CVE-2007-3215
PHPMailer Shell command injection
Also known as GHSA-6h78-85v2-mmch
Published 19 y ago · modified 4 mo ago · JSON
CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.4%
percentile 84%
Public exploits
0
none known
Summary
PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.
Exploit prediction (EPSS)
2.41% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| packagist | phpmailer/phpmailer | <1.7.4 | 1.7.4 |
References
- securityfocus.com /archive/1/471065/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- debian.org /security/2007/dsa-1315 · vendor-advisory, x_refsource_DEBIAN, x_transferred
- sourceforge.net /project/shownotes.php?release_id=517428&group_id=157374 · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/34818 · vdb-entry, x_refsource_XF, x_transferred
- secunia.com /advisories/25755 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securityreason.com /securityalert/2802 · third-party-advisory, x_refsource_SREASON, x_transferred
- osvdb.org /76139 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /bid/24417 · vdb-entry, x_refsource_BID, x_transferred
- sourceforge.net /tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707 · x_refsource_MISC, x_transferred
- osvdb.org /37206 · vdb-entry, x_refsource_OSVDB, x_transferred
- vupen.com /english/advisories/2007/2267 · vdb-entry, x_refsource_VUPEN, x_transferred
- larholm.com /2007/06/11/phpmailer-0day-remote-execution/ · x_refsource_MISC, x_transferred
- yehg.net /lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce · x_refsource_MISC, x_transferred
- secunia.com /advisories/25626 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- secunia.com /advisories/25758 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- vupen.com /english/advisories/2007/2161 · vdb-entry, x_refsource_VUPEN, x_transferred
- seclists.org /fulldisclosure/2011/Oct/223 · mailing-list, x_refsource_FULLDISC, x_transferred
- github.com /PHPMailer/PHPMailer/security/advisories/GHSA-6h78-85v2-mmch · web
- cxsecurity.com /issue/WLB-2007060063 · web
- github.com /PHPMailer/PHPMailer · package
- seclists.org /fulldisclosure/2011/Oct/223 · web
- sourceforge.net /p/phpmailer/bugs/192 · web
- web.archive.org /web/20070714054359/http://larholm.com/2007/06/11/phpmailer-0day-remote-execution · web
- yehg.net /lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce · web
Sources
- CVE List: CVE-2007-3215
- GitHub Advisory: GHSA-6h78-85v2-mmch
- NVD: CVE-2007-3215
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.