VDB
GCVE-110-MAGEIA-2017-16
GCVE-110-MAGEIA-2017-16
Advisory Published
When using the zend-mail component to send email via the
Zend\Mail\Transport\Sendmail transport, a malicious user may be able to
inject arbitrary parameters to the system sendmail program. The attack
is performed by providing additional quote characters within an address;
when unsanitized, they can be interpreted as additional command line
arguments, leading to the vulnerability (CVE-2016-10034).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | php-ZendFramework2 | 0 (affected), 2.4.11-1.mga5 (unaffected), 0 (affected), 2.4.11-1.mga5 (unaffected) | — |
| Mageia | keepassx2 | 0 (affected), 2.0.3-1.mga5 (unaffected) | — |
Aliases
References
Browse GCVE Records
72,580 records in the GCVE database · Updated July 15, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.