CVE-2016-10074

Related Files

Debian Security Advisory 3769-1

Posted Jan 23, 2017

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3769-1 - Dawid Golunski from LegalHackers discovered that PHP Swift Mailer, a mailing solution for PHP, did not correctly validate user input. This allowed a remote attacker to execute arbitrary code by passing specially formatted email addresses in specific email headers.

tags | advisory, remote, arbitrary, php

systems | linux, debian

advisories | CVE-2016-10074

SHA-256 | e2e5a3534d3f83b584d03a5b7dd5fb7a5576f54026746b097bbbf993c3200eb9

Download | Favorite | View

PHPMailer / Zend-mail / SwiftMailer Remote Code Execution

Posted Jan 3, 2017

Authored by Dawid Golunski

This proof of concept exploit aims to execute a reverse shell on the target in the context of the web server user via a vulnerable PHP email library.

tags | exploit, web, shell, php, proof of concept

advisories | CVE-2016-10033, CVE-2016-10034, CVE-2016-10045, CVE-2016-10074

SHA-256 | a6480837acf975f49749549e06ab31dc5538b6276d390b38aa0f7a89e63148d0

Download | Favorite | View

SwiftMailer Remote Code Execution

Posted Dec 29, 2016

Authored by Dawid Golunski

SwiftMailer versions prior to 5.4.5-DEV suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2016-10074

SHA-256 | 6c8d495f3e13599fefac246580f75812ee61962841c2cff7e333f604d3caee57

Download | Favorite | View