Approved changes feed: RSS · Atom
cpe:2.3:a:phpmailer:phpmailer:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Phpmailer (bfe8cf96-30c1-5617-bbf9-d0a9aa971816) |
|---|---|
| Product | Phpmailer (0b53a259-39d5-55e3-b172-43bcee8a8edf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/phpmailer/phpmailer |
purl2cpe | 2026-06-01 10:18:15.157737 |
pkg:github/phpmailer/phpmailer |
purl2cpe | 2026-06-01 10:18:15.157739 |
pkg:golang/github.com/phpmailer/phpmailer |
purl2cpe | 2026-06-01 10:18:15.157741 |
pkg:sourceforge/phpmailer |
purl2cpe | 2026-06-01 10:18:15.157742 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3603 |
vulnerable | 2026-06-08 05:33:53.078272 |
Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer
HIGH (8.1)
PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means). If the $patternselect parameter to validateAddress() is set to 'php' (the default, defined by PHPMailer::$validator), and the global namespace contains a function called php, it will be called in preference to the built-in validator of the same name. Mitigated in PHPMailer 6.5.0 by denying the use of simple strings as validator function names.
Published: 2021-06-17T12:09:42.000Z
Updated: 2024-08-03T17:01:07.074Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1807 |
vulnerable | 2026-06-08 04:48:27.570530 |
Details available
The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a long header field.
Published: 2005-06-01T04:00:00.000Z
Updated: 2024-08-07T22:06:57.402Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.