NVD

Id
28635  
Name
CVE-2015-8476  
Description
Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class.phpmailer.php or (2) SMTP command to the sendCommand function in class.smtp.php, a different vulnerability than CVE-2012-0796.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-12-16  
Modified Date
2016-12-05  
Seq
2015-8476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150648 28635 CVE-2015-8476 FEDORA-2015-abf9659276  View
150649 28635 CVE-2015-8476 FEDORA-2015-39522bb8c9  View
150650 28635 CVE-2015-8476 DSA-3416  View
150651 28635 CVE-2015-8476 [oss-security] 20151204 CVE Request: PHPMailer Message Injection Vulnerability  View
150652 28635 CVE-2015-8476 [oss-security] 20151204 Re: CVE Request: PHPMailer Message Injection Vulnerability  View
150653 28635 CVE-2015-8476 78619  View
150654 28635 CVE-2015-8476 https://github.com/PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0  View
150655 28635 CVE-2015-8476 https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11134 JVNDB-2015-006454 PHPMailer における CRLF インジェクションの脆弱性 PHPMailer には、CRLF インジェクションの脆弱性が存在します。 CVE-2015-8476 85701 CVE-2015-8476 28635 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006454.html 2015-11-01 2015-12-18 View