VDB
GCVE-110-MAGEIA-2017-22
GCVE-110-MAGEIA-2017-22
Advisory Published
It was discovered that PHPMailer, a popular library to send email from
PHP applications, allowed a remote attacker to execute code if they were
able to provide a crafted Sender address (CVE-2016-10033).
It was discovered that PHPMailer prior to 5.2.22 contained a local file
disclosure vulnerability if content passed to `msgHTML()` was sourced
from unfiltered user input (CVE-2017-5223).
Threat Intelligence
Snort Rules (1)
1875077: WordPress PHPMailer CVE-2016-10033 RCE via sendmail argument injection
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | php-phpmailer | 0 (affected), 5.2.22-1.mga5 (unaffected) | — |
References
Browse GCVE Records
20,323 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.