CVE-2016-10045
Critical · 9.8CVSS
9.8
EPSS
97.7%
Published
Dec 30, 2016
CISA due date
—
The record
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | phpmailer/phpmailer | 5.0.0 | 5.2.20 |
| Alpine:v3.2 | php-phpmailer | 0 | 5.2.4-r0 |
| Alpine:v3.3 | php-phpmailer | 0 | 5.2.4-r0 |
| Alpine:v3.4 | php5-phpmailer | 0 | 5.2.0-r1 |
| Alpine:v3.5 | php5-phpmailer | 0 | 5.2.4-r1 |
| Ubuntu:Pro:16.04:LTS | libphp-phpmailer | 0 | 5.2.14+dfsg-1ubuntu0.1~esm1 |
| Ubuntu:Pro:18.04:LTS | libphp-phpmailer | 0 | 5.2.14+dfsg-2.3+deb9u2ubuntu0.1~esm1 |
| Ubuntu:Pro:20.04:LTS | libphp-phpmailer | 0 | 6.0.6-0.1ubuntu0.1~esm1 |
| Ubuntu:Pro:22.04:LTS | libphp-phpmailer | 0 | 6.2.0-2ubuntu0.1~esm1 |
| packagist | phpmailer/phpmailer | 5.0.0 | 5.2.20 |
| packagist | phpmailer/phpmailer | 5.2.18 | No fix |
| packagist | phpmailer/phpmailer | 5.2.19 | No fix |
Related vulnerabilities
- CVE-2017-11503 PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of… Also affects phpmailer/phpmailer
- CVE-2016-10033 The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow… Also affects phpmailer/phpmailer
- CVE-2008-5619 html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10… Also affects phpmailer/phpmailer
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-77
- CVE-2026-112942 launch-editor allows users to open files with line numbers in editor from Node.js. CWE-77
- CVE-2026-55453 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-77
- CVE-2026-102827 simple-git, an interface for running git commands in any node.js application, enables… CWE-77
- CVE-2026-102826 simple-git, an interface for running git commands in any node.js application, enables… CWE-77