RSS   Vulnerabilities for 'Zend-mail'   RSS

2016-12-30
 
CVE-2016-10034

CWE-77
 

 
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.

 

 >>> Vendor: ZEND 23 Products
Zend platform
Zend google data client library preview
Zend framework preview
Engine
Framework
Server
Zend server
Zend framework
Zendto
Zend openid
Zendopenid
Zendrest
Zendservice amazon
Zendservice api
Zendservice audioscrobbler
Zendservice nirvanix
Zendservice slideshare
Zendservice technorati
Zendservice windowsazure
Zend-cache
Zf-apigility-doctrine
Zend-mail
Diactoros


Copyright 2021, cxsecurity.com

 

Back to Top