NVD

Id
42871  
Name
CVE-2012-0796  
Description
class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-07-17  
Modified Date
2012-07-17  
Seq
2012-0796  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215706 42871 CVE-2012-0796 http://git.moodle.org/gw?p=moodle.git;a=commit;h=62988bf0bbc73df655f51884aaf1f523928abff9  View
215707 42871 CVE-2012-0796 http://moodle.org/mod/forum/discuss.php?d=194015  View
215708 42871 CVE-2012-0796 https://bugzilla.redhat.com/show_bug.cgi?id=783532  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27406 JVNDB-2012-003113 Moodle およびその他の製品で使用される PHPMailer library における任意の電子メールヘッダーを挿入される脆弱性 Moodle およびその他の製品使用される PHPMailer library の class.phpmailer.php には、任意の電子メールヘッダーを挿入される脆弱性が存在します。 CVE-2012-0796 54034 CVE-2012-0796 42871 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003113.html 2012-01-17 2012-07-18 View