CVE-2016-10033 — 脆弱性インテリジェンス
PHP — PHPMailer
公表日:
- CVSS
- 9.8
- CISA KEV
- 既知の悪用を確認
情報源の原文（翻訳ではありません）
PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.