CVE-2006-5734
PHPMailer Local file inclusion
Impact
### Impact Arbitrary local file inclusion via the `$lang` property, remotely exploitable if host application passes unfiltered user data into that property. The 3 CVEs listed are applications that used PHPMailer that were vulnerable to this problem. ### Patches It's not known exactly when this was fixed in the host applications, but it was fixed in PHPMailer 5.2.0. ### Workarounds Filter and validate user-supplied data before use. ### References https://nvd.nist.gov/vuln/detail/CVE-2006-5734 https://nvd.nist.gov/vuln/detail/CVE-2007-3215 https://nvd.nist.gov/vuln/detail/CVE-2007-2021 Example exploit: https://www.exploit-db.com/exploits/14893 ### For more information If you have any questions or comments about this advisory: * Open a private issue in [the PHPMailer project](https://github.com/PHPMailer/PHPMailer)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | phpmailer/phpmailer | < 5.2.0 | 5.2.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adaptive Technology Resource Centre | Atutor | Version 1.5.3.2 |
References
- NVD record
- CVE.org record
- GitHub advisory
- http://securityreason.com/securityalert/1823
- http://www.securityfocus.com/archive/1/449233/100/200/threaded
- http://www.securityfocus.com/bid/20634
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29693
- https://github.com/advisories/GHSA-8jc3-5p29-qgjx
- https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-8jc3-5p29-qgjx