CVE-2007-3215

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.41%

Published

Jun 14, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

Affected Products (5)

phpmailer · phpmailervulnerable

References (20)

http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/

http://osvdb.org/37206

http://osvdb.org/76139

http://seclists.org/fulldisclosure/2011/Oct/223

http://secunia.com/advisories/25626

Vendor Advisory

http://secunia.com/advisories/25755

http://secunia.com/advisories/25758

http://securityreason.com/securityalert/2802

http://sourceforge.net/project/shownotes.php?release_id=517428&group_id=157374

http://www.debian.org/security/2007/dsa-1315

http://www.securityfocus.com/archive/1/471065/100/0/threaded

http://www.securityfocus.com/bid/24417

http://www.vupen.com/english/advisories/2007/2161

http://www.vupen.com/english/advisories/2007/2267

http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce

https://exchange.xforce.ibmcloud.com/vulnerabilities/34818

https://sourceforge.net/tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707

http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/

http://osvdb.org/37206

http://osvdb.org/76139

KEV Catalog EPSS Scores Vendors All CVEs