Podatność CVE-2016-10034

Podatność CVE-2016-10034

Publikacja: 2016-12-30

Opis:

	Tytuł	Autor	Data
High	Zend Framework / zend-mail < 2.4.11 Remote Code Execution Exploit	Dawid Golunski	31.12.2016
High	PHPMailer / Zend-mail / SwiftMailer Remote Code Execution	PwnScriptum	04.01.2017
High	PHPMailer < 5.2.20 with Exim MTA Remote Code Execution	phackt_ul	22.06.2017

Typ:

(Improper Neutralization of Special Elements used in a Command ('Command Injection'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
7.5/10	6.4/10	10/10

Affected software
ZEND -> Zend-mail
ZEND -> Zend framework

http://www.securityfocus.com/bid/95144

http://www.securitytracker.com/id/1037539

https://framework.zend.com/security/advisory/ZF2016-04

https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.html

https://security.gentoo.org/glsa/201804-10

https://www.exploit-db.com/exploits/40979/

https://www.exploit-db.com/exploits/40986/

https://www.exploit-db.com/exploits/42221/