Debian Linux Security Advisory 3769-1 - Dawid Golunski from LegalHackers discovered that PHP Swift Mailer, a mailing solution for PHP, did not correctly validate user input. This allowed a remote attacker to execute arbitrary code by passing specially formatted email addresses in specific email headers.
e2e5a3534d3f83b584d03a5b7dd5fb7a5576f54026746b097bbbf993c3200eb9
This proof of concept exploit aims to execute a reverse shell on the target in the context of the web server user via a vulnerable PHP email library.
a6480837acf975f49749549e06ab31dc5538b6276d390b38aa0f7a89e63148d0
SwiftMailer versions prior to 5.4.5-DEV suffers from a remote code execution vulnerability.
6c8d495f3e13599fefac246580f75812ee61962841c2cff7e333f604d3caee57