← back
CVE-2016-10131

CVE-2016-10131

EPSS 3.1%
system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gist.github.com/Zenexer/40d02da5e07f151adeaeeaa11af9ab36https://github.com/bcit-ci/CodeIgniter/issues/4963https://github.com/bcit-ci/CodeIgniter/pull/4966http://www.securityfocus.com/bid/96851