Home > Vulnerability Database > CVE-2007-3215

Mend.io Vulnerability Database

CVE-2007-3215

Date: June 14, 2007

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

Severity Score

5.6

Related Resources (26)

Url: http://osvdb.org/76139

Url: http://securityreason.com/securityalert/2802

Url: https://web.archive.org/web/20070714054359/http://larholm.com/2007/06/11/phpmailer-0day-remote-execution

Url: http://www.securityfocus.com/bid/24417

Url: http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce

Url: http://secunia.com/advisories/25758

Url: http://secunia.com/advisories/25755

Url: http://sourceforge.net/project/shownotes.php?release_id=517428&group_id=157374

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-3215

Url: https://sourceforge.net/tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707

Url: http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/

Url: http://www.vupen.com/english/advisories/2007/2161

Url: https://cxsecurity.com/issue/WLB-2007060063

Url: http://seclists.org/fulldisclosure/2011/Oct/223

Url: http://www.debian.org/security/2007/dsa-1315

Url: https://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce

Url: http://www.vupen.com/english/advisories/2007/2267

Url: https://github.com/PHPMailer/PHPMailer

Url: http://secunia.com/advisories/25626

Url: http://www.securityfocus.com/archive/1/471065/100/0/threaded

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/34818

Url: https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-6h78-85v2-mmch

Url: https://seclists.org/fulldisclosure/2011/Oct/223

Url: http://osvdb.org/37206

Url: https://sourceforge.net/p/phpmailer/bugs/192

Url: https://www.mend.io/vulnerability-database/CVE-2007-3215

Severity Score

5.6

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2007-3215

Date: June 14, 2007

Severity Score

Related Resources (26)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?