CVE-2016-10074

Related Files

Debian Security Advisory 3769-1

Posted Jan 23, 2017

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3769-1 - Dawid Golunski from LegalHackers discovered that PHP Swift Mailer, a mailing solution for PHP, did not correctly validate user input. This allowed a remote attacker to execute arbitrary code by passing specially formatted email addresses in specific email headers.

tags | advisory, remote, arbitrary, php

systems | linux, debian

advisories | CVE-2016-10074

MD5 | 35e5943384aadc42f6da685cc43be28c

Download | Favorite | View

PHPMailer / Zend-mail / SwiftMailer Remote Code Execution

Posted Jan 3, 2017

Authored by Dawid Golunski

This proof of concept exploit aims to execute a reverse shell on the target in the context of the web server user via a vulnerable PHP email library.

tags | exploit, web, shell, php, proof of concept

advisories | CVE-2016-10033, CVE-2016-10034, CVE-2016-10045, CVE-2016-10074

MD5 | a0be91defae2564f4405c81fdeab38cd

Download | Favorite | View

SwiftMailer Remote Code Execution

Posted Dec 29, 2016

Authored by Dawid Golunski

SwiftMailer versions prior to 5.4.5-DEV suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2016-10074

MD5 | 867421c2ab76adf20394234a4a466e45

Download | Favorite | View