Test ID:	1.3.6.1.4.1.25623.1.0.809843
Category:	Web application abuses
Title:	PHPMailer < 5.2.20 RCE Vulnerability
Summary:	PHPMailer is prone to a remote code execution (RCE) vulnerability.
Description:	Summary: PHPMailer is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw exists due to incomplete fix for CVE-2016-10033 as, PHPMailer uses the Sender variable to build the params string. The validation is done using the RFC 3696 specification, which can allow emails to contain spaces when it has double quote. Vulnerability Impact: Successfully exploiting this issue allows an remote attacker to execute arbitrary code in the context of the web server and compromise the target web application. Affected Software/OS: PHPMailer versions prior to 5.2.20 Solution: Upgrade to PHPMailer 5.2.20 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10045 BugTraq ID: 95130 http://www.securityfocus.com/bid/95130 Bugtraq: 20161228 PHPMailer < 5.2.20 Remote Code Execution PoC 0day Exploit (CVE-2016-10045) (Bypass of the CVE-2016-1033 patch) (Google Search) http://www.securityfocus.com/archive/1/539967/100/0/threaded https://www.exploit-db.com/exploits/40969/ https://www.exploit-db.com/exploits/40986/ https://www.exploit-db.com/exploits/42221/ http://seclists.org/fulldisclosure/2016/Dec/81 http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html http://openwall.com/lists/oss-security/2016/12/28/1 http://www.securitytracker.com/id/1037533
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.