Test ID:	1.3.6.1.4.1.25623.1.0.108467
Category:	Web application abuses
Title:	PHPMailer < 5.2.14 SMTP CRLF Injection Vulnerability
Summary:	PHPMailer is prone to a SMTP CRLF injection vulnerability.
Description:	Summary: PHPMailer is prone to a SMTP CRLF injection vulnerability. Vulnerability Insight: The flaw exists because PHPMailer allows to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class.phpmailer.php or (2) SMTP command to the sendCommand function in class.smtp.php. Vulnerability Impact: Attackers can exploit this issue to send arbitrary messages. Affected Software/OS: PHPMailer versions before 5.2.14 are vulnerable. Solution: Update to version 5.2.14 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8476 BugTraq ID: 78619 http://www.securityfocus.com/bid/78619 Debian Security Information: DSA-3416 (Google Search) http://www.debian.org/security/2015/dsa-3416 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177139.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177130.html http://www.openwall.com/lists/oss-security/2015/12/04/5 http://www.openwall.com/lists/oss-security/2015/12/05/1
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.