CVE:CVE-2016-10045
CNNVD:CNNVD-201612-755
PHPMailer是一个用于发送电子邮件的PHP类库。
PHPMailer 5.2.20之前的版本中的isMail transport存在安全漏洞,该漏洞源于程序没有设置Sender属性。远程攻击者可利用该漏洞向邮件命令传递额外的参数，并执行任意代码。
solution:Upgrade phpmailer_project phpmailer to a higher version than 5.2.20,and avoid the version (,5.2.20); Upgrade wordpress wordpress to a higher version than 4.7,and avoid the version (,4.7]; Upgrade joomla joomla! to a higher version than 3.6.5,and avoid the version [1.5.0,3.6.5]