← volver
CVE-2016-10131

CVE-2016-10131

EPSS 3.1%
system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://gist.github.com/Zenexer/40d02da5e07f151adeaeeaa11af9ab36https://github.com/bcit-ci/CodeIgniter/issues/4963https://github.com/bcit-ci/CodeIgniter/pull/4966http://www.securityfocus.com/bid/96851