3 ms·
That's not correct, the added escapeshellarg() call is inside the mailSend() function, which sends mail through php's mail(). See [1]. [1]: https://github.com/
by DCoder 10y ago
That's not correct, the added escapeshellarg() call is inside the mailSend() function, which sends mail through php's mail(). See [1].
[1]: https://github.com/PHPMailer/PHPMailer/blame/4835657cd639fbd09afd33307cef164edf807cdc/class.phpmailer.php#L1438-L1449 https://github.com/PHPMailer/PHPMailer/blame/4835657cd639fbd...
- SwellJoe 10y agoBut, if something comes into the mail server via SMTP, it's gonna be protected by the mail servers own defenses. Unless the MTA also has a similar vulnerability, it wouldn't be dangerous in the SMTP case. Right? Or are you saying just the PHP mail() function is similarly exploitable?
- DCoder 10y agoThe parent post said "only implementations using sendmail (ie. not mail() or SMTP) are affected". From my reading of the code, "only implementations using mail() (ie. not sendmail or SMTP) are affected".