Skip to content
NewA calmer, faster ZeroHour

Critical PHPMailer Flaw leaves Millions of Websites Vulnerable to Remote Exploit

The Hacker Newsby @TheHackersNews ()2 min read3 · 1 read
Analyze CVE-2016-10033 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2016-10033
Command Injection RCE in PHPMailer (Ships with WordPress and Joomla)
9.8100%KEVPoC ×14
KEV

From the original article

2 min read at thehackernews.com

A critical vulnerability has been discovered in PHPMailer , which is one of the most popular open source PHP libraries to send emails used by more than 9 Million users worldwide. Millions of PHP websites and popular open source web applications, including WordPress, Drupal, 1CRM, SugarCRM, Yii, and Joomla comes with PHPMailer library for sending emails using a variety of methods, including SMTP to their users.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.