En bref
- CVE-2008-5619 est une vulnérabilité CRITIQUE (CVSS 10.0) touchant phpmailer/phpmailer, webmail (roundcube).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 58.6%, plus élevée que 99.1% des vulnérabilités.
- Correctif : mettre à jour vers 5.2.10 ou plus récent.
Description
html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.
NVD description
html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.
Autres vulnérabilités de phpmailer/phpmailer
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free