PHPMailer 0day remote command execution

Welcome, Guest. Please login or register.
Did you miss your activation email?
May 27, 2012, 02:39:39 AM

Interested in joining the WebsiteBaker team?
For more Information read here or on our new website.

155555 Posts in 21715 Topics by 7737 Members
Latest Member: gx-world

WebsiteBaker Community Forum

English

Archive (posts up to 2007) (Moderator: Argos)

PHPMailer 0day remote command execution

Pages: [1] Go Down

Author

Topic: PHPMailer 0day remote command execution (Read 1165 times)

tomhung

Offline

Posts: 353

PHPMailer 0day remote command execution

« on: June 11, 2007, 07:01:55 PM »

http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/

I know we include this class. Lets check to see if WB has a problem with this issue.

G


	Logged

larholm

Offline

Posts: 1

Re: PHPMailer 0day remote command execution

« Reply #1 on: June 11, 2007, 09:45:59 PM »

I took a look at the WB 2.6.5 sources and you are specifically using either SMTP or PHP mail(), not sendmail. In addition, you're not setting the inherited Sender property inside your wbmailer class.

Therefor, you should not be affected by this vulnerability.

Cheers

Thor Larholm
http://www.larholm.com


	Logged

Pages: [1] Go Up

Jump to: