Unscored severity · published Jun 14, 2007
CVE-2007-3215
PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in…
–
CVSS
2.4%
EPSS
No
On KEV
Description
PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpmailer · Phpmailer
1.7; 1.7.1; 1.7.2; 1.7.3; 1.73 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3215
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3215
larholm.com
http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/
osvdb.org
http://osvdb.org/37206
osvdb.org
http://osvdb.org/76139
seclists.org
http://seclists.org/fulldisclosure/2011/Oct/223
Vendor Advisory
http://secunia.com/advisories/25626
secunia.com
http://secunia.com/advisories/25755
More from Phpmailer
–
CVE-2005-1807
The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a…