{"schemaVersion":3,"id":"CVE-2016-10033","aliases":["ALPINE-CVE-2016-10033","UBUNTU-CVE-2016-10033","DEBIAN-CVE-2016-10033","DLA-770-1","DSA-3750-1"],"status":"published","duplicateOf":null,"title":"PHPMailer Command Injection Vulnerability","description":"The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \\\" (backslash double quote) in a crafted Sender property.","dates":{"published":"2016-12-30T19:00:00.000Z","modified":"2025-10-21T23:55:47.202Z","reserved":null,"kevAdded":["2025-07-07T00:00:00.000Z"],"kevDue":["2025-07-28T00:00:00.000Z"]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true}]},"epss":{"probability":0.99714,"percentile":0.99952,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.99714},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99714,"percentile":0.99952}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99714,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99714,"percentile":0.99952}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-07-07T00:00:00.000Z","dueDate":"2025-07-28T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","name":"PHPMailer Command Injection Vulnerability","description":"PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.","notes":[{"type":"text","value":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18"},{"type":"url","href":"https://github.com/advisories/GHSA-5f37-gxvh-23v6","label":"github.com/advisories/GHSA-5f37-gxvh-23v6"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2016-10033","label":"nvd.nist.gov/vuln/detail/CVE-2016-10033"}],"vendor":"PHP","product":"PHPMailer","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-07-07T00:00:00.000Z","dueDate":"2025-07-28T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","name":"PHPMailer Command Injection Vulnerability","description":"PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.","notes":[{"type":"text","value":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18"},{"type":"url","href":"https://github.com/advisories/GHSA-5f37-gxvh-23v6","label":"github.com/advisories/GHSA-5f37-gxvh-23v6"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2016-10033","label":"nvd.nist.gov/vuln/detail/CVE-2016-10033"}],"vendor":"PHP","product":"PHPMailer","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_4B40FDA0801A3F79","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_D969A90175C699C9","name":"Exploit Reference (legalhackers.com)","source":"reference","url":"https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_C9D036BFF1958C9C","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_70D51AAC676CEEC1","name":"Exploit Reference (rapid7.com)","source":"reference","url":"http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_A08377F0523FA1FE","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/95108","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"41962","name":"WordPress Core 4.6 - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/41962","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":null,"platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"webapps","platform":"linux","file":"exploits/linux/webapps/41962.sh","codes":["CVE-2016-10033"]},"metasploit":null},{"id":"41996","name":"Vanilla Forums < 2.3 - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/41996","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"remote","platform":"php","file":"exploits/php/remote/41996.sh","codes":["CVE-2016-10073","CVE-2016-10033"]},"metasploit":null},{"id":"42024","name":"WordPress Plugin PHPMailer 4.6 - Host Header Command Injection (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/42024","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"php","file":"exploits/php/remote/42024.rb","codes":["CVE-2016-10033"]},"metasploit":null},{"id":"40968","name":"PHPMailer < 5.2.18 - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/40968","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":null,"platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"webapps","platform":"php","file":"exploits/php/webapps/40968.sh","codes":["CVE-2016-10033"]},"metasploit":null},{"id":"40970","name":"PHPMailer < 5.2.18 - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/40970","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":null,"platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"webapps","platform":"php","file":"exploits/php/webapps/40970.php","codes":["CVE-2016-10033"]},"metasploit":null},{"id":"40974","name":"PHPMailer < 5.2.18 - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/40974","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":null,"platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"webapps","platform":"php","file":"exploits/php/webapps/40974.py","codes":["CVE-2016-10033"]},"metasploit":null},{"id":"40969","name":"PHPMailer < 5.2.20 - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/40969","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":null,"platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"webapps","platform":"php","file":"exploits/php/webapps/40969.py","codes":["CVE-2016-10045","CVE-2016-10033"]},"metasploit":null},{"id":"40986","name":"PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - 'AIO' 'PwnScriptum' Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/40986","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":null,"platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"webapps","platform":"php","file":"exploits/php/webapps/40986.py","codes":["CVE-2016-10074","CVE-2016-10045","CVE-2016-10034","CVE-2016-10033"]},"metasploit":null},{"id":"42221","name":"PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/42221","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":null,"platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"webapps","platform":"php","file":"exploits/php/webapps/42221.py","codes":["CVE-2016-10074","CVE-2016-10045","CVE-2016-10034","CVE-2016-10033"]},"metasploit":null},{"id":"MSF_EXPLOIT_MULTI_HTTP_PHPMAILER_ARG_INJECTION","name":"PHPMailer Sendmail Argument Injection","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/http/phpmailer_arg_injection.rb","maturity":"poc","reliabilityScore":0,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/multi/http/phpmailer_arg_injection","rank":"0","rankName":"manual","postAuth":false,"check":false,"stability":["crash-safe"],"sideEffects":["artifacts-on-disk","ioc-in-logs"],"reliability":["repeatable-session"]}},{"id":"MSF_EXPLOIT_UNIX_WEBAPP_WP_PHPMAILER_HOST_HEADER","name":"WordPress PHPMailer Host Header Command Injection","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/unix/webapp/wp_phpmailer_host_header.rb","maturity":"poc","reliabilityScore":0.3333333333333333,"verified":false,"type":"remote","platforms":[],"requiresAuth":true,"exploitdb":null,"metasploit":{"fullname":"exploit/unix/webapp/wp_phpmailer_host_header","rank":"200","rankName":"average","postAuth":true,"check":true,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":16,"weaknesses":[{"id":"CWE-88","name":"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","description":"The product constructs a string for a command to be executed by a separate component\nin another control sphere, but it does not properly delimit the\nintended arguments, options, or switches within that command string.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/88.html"}],"affected":[{"vendor":"alpine","product":"php-phpmailer","name":"php-phpmailer","label":"php-phpmailer","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/php-phpmailer","purlType":"apk","versions":[{"text":"< 5.2.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.4-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"php5-phpmailer","name":"php5-phpmailer","label":"php5-phpmailer","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/php5-phpmailer","purlType":"apk","versions":[{"text":"< 5.2.0-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.2.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.0-r1 | < 5.2.4-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"libphp-phpmailer","name":"libphp-phpmailer","label":"libphp-phpmailer","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libphp-phpmailer","purlType":"deb","versions":[{"text":"< 5.2.14+dfsg-2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.2.9+dfsg-2+deb8u2","noFixRecorded":false,"fixedIn":null},{"text":"< 5.1-1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.14+dfsg-2.1 | < 5.2.9+dfsg-2+deb8u2 | < 5.1-1.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libphp-phpmailer","name":"libphp-phpmailer","label":"libphp-phpmailer","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libphp-phpmailer","purlType":"deb","versions":[{"text":"< 5.2.14+dfsg-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.14+dfsg-1ubuntu0.1~esm1","eol":null,"hubHref":null},{"vendor":"joomla","product":"joomla\\!","name":"Joomla!","label":"joomla\\!","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.5.0, ≤ 3.6.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.5.0, ≤ 3.6.5","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"joomla","label":"Joomla!","category":"server-app"}},"hubHref":"/vendor/joomla/joomla"},{"vendor":"phpmailer_project","product":"phpmailer","name":"phpmailer","label":"phpmailer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.2.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.18","eol":null,"hubHref":"/vendor/phpmailer_project/phpmailer"},{"vendor":"wordpress","product":"wordpress","name":"wordpress","label":"wordpress","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.7","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"wordpress","label":"WordPress","category":"server-app"}},"hubHref":"/vendor/wordpress/wordpress"}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html","label":"packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.drupal.org/psa-2016-004","label":"www.drupal.org/psa-2016-004","hostname":"www.drupal.org","tags":["X Refsource CONFIRM","Third Party Advisory","REPORT"]},{"url":"https://www.exploit-db.com/exploits/42221/","label":"www.exploit-db.com/exploits/42221/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40969/","label":"www.exploit-db.com/exploits/40969/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/41962/","label":"www.exploit-db.com/exploits/41962/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40968/","label":"www.exploit-db.com/exploits/40968/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Patch","Third Party Advisory","VDB Entry","REPORT"]},{"url":"https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html","label":"legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html","hostname":"legalhackers.com","tags":["X Refsource MISC","Exploit","Patch","Third Party Advisory","REPORT"]},{"url":"https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18","label":"github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18","hostname":"github.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory","REPORT"]},{"url":"http://www.securityfocus.com/archive/1/539963/100/0/threaded","label":"www.securityfocus.com/archive/1/539963/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities","label":"github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities","hostname":"github.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory","REPORT"]},{"url":"http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html","label":"packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry","REPORT"]},{"url":"https://www.exploit-db.com/exploits/40974/","label":"www.exploit-db.com/exploits/40974/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40986/","label":"www.exploit-db.com/exploits/40986/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40970/","label":"www.exploit-db.com/exploits/40970/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Patch","Third Party Advisory","VDB Entry","REPORT"]},{"url":"http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection","label":"www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection","hostname":"www.rapid7.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/41996/","label":"www.exploit-db.com/exploits/41996/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Dec/78","label":"seclists.org/fulldisclosure/2016/Dec/78","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Patch","Third Party Advisory","REPORT"]},{"url":"http://www.securityfocus.com/bid/95108","label":"www.securityfocus.com/bid/95108","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Exploit","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1037533","label":"www.securitytracker.com/id/1037533","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html","label":"developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html","hostname":"developer.joomla.org","tags":["X Refsource CONFIRM","Third Party Advisory","REPORT"]},{"url":"https://www.exploit-db.com/exploits/42024/","label":"www.exploit-db.com/exploits/42024/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10033","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10033","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-10033","label":"security.alpinelinux.org/vuln/CVE-2016-10033","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10033","label":"ubuntu.com/security/CVE-2016-10033","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html","label":"legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html","hostname":"legalhackers.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5956-1","label":"ubuntu.com/security/notices/USN-5956-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10033","label":"www.cve.org/CVERecord?id=CVE-2016-10033","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-10033","label":"security-tracker.debian.org/tracker/CVE-2016-10033","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2017-0022","USN-5956-1"],"duplicates":["CVE-2016-1003"],"related":["USN-5956-1"]},"timeline":[{"kind":"published","date":"2016-12-30T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2025-07-07T00:00:00.000Z","label":"Added to CISA KEV","detail":"PHPMailer Command Injection Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2025-07-28T00:00:00.000Z","label":"CISA remediation due","detail":"Apply mitigations per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:55:47.202Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:20:04.586Z","stale":false,"partial":false}}