CVE-2016-10045
CriticalSummary
The isMail transport in PHPMailer before version 5.2.20 may allow remote attackers to pass extra parameters to the mail command, potentially leading to arbitrary code execution. This issue arises from improper interaction between the escapeshellarg function and internal escaping in the mail function in PHP.
Risk Assessment
Organizations may be exposed to remote code execution, which can lead to serious security breaches and data loss. Attackers could exploit this vulnerability to gain control over the system.
Recommendation
It is recommended to update PHPMailer to version 5.2.20 or later to mitigate this vulnerability. Additionally, conducting a code audit to identify potential security gaps is advisable.
Original NVD description (English source)
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.