CVE ID:	CVE-2016-10045
Description:	The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.
Test IDs:	1.3.6.1.4.1.25623.1.0.703750   1.3.6.1.4.1.25623.1.1.1.2.2017.770   1.3.6.1.4.1.25623.1.0.809843   1.3.6.1.4.1.25623.1.1.1.1.2017.3750
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10045 BugTraq ID: 95130 http://www.securityfocus.com/bid/95130 Bugtraq: 20161228 PHPMailer < 5.2.20 Remote Code Execution PoC 0day Exploit (CVE-2016-10045) (Bypass of the CVE-2016-1033 patch) (Google Search) http://www.securityfocus.com/archive/1/539967/100/0/threaded https://www.exploit-db.com/exploits/40969/ https://www.exploit-db.com/exploits/40986/ https://www.exploit-db.com/exploits/42221/ http://seclists.org/fulldisclosure/2016/Dec/81 http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html http://openwall.com/lists/oss-security/2016/12/28/1 http://www.securitytracker.com/id/1037533