NetSight
IP …
medium4.0

CVE-2012-0796

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other p…

Impact

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.

Affected products

VendorProductAffected versions
MoodleMoodle
Versions 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6

Weakness classification

CWE-94

References