Wednesday, December 28, 2016

Ciritical Vulnerability In PHPMailer

There has been found a critical vulnerability in PHPMailer library. The vulnerability (CVE-2016-10033) is related to the way that websites handle web-based email submission forms using the PHPMailer component. PHPMailer is used by many popular web-publishing platforms such as WordPress, Drupal and Joomla.

Affected versions:
PHPMailer versions earlier than 5.2.18

Fresh version of the PHPMailer can be downloaded here.

More information:
about the vulnerability
Drupal advisory

No comments: