CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

Yangiliklar CVE Tracker Exploitlar Hujumlar Xarita

CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

O'zbek tilidagi kiberxavfsizlik portali. Yangiliklar, CVE tracker, hujumlar bazasi.

Yangiliklar

Barcha yangiliklar
Hujumlar
Zayifliklar
O'zbekiston
Jahon

Asboblar

CVE Tracker
Exploit DB
Hujumlar bazasi
Threat xarita

Loyiha

Biz haqimizda

© 2026 CyberNewsUz. Barcha huquqlar himoyalangan.

CVE Tracker ga qaytish

CVE-2016-10033

Kritik(9.8)

5.2.18 dan oldin PHPMailer’dagi isMail transportidagi mailSend funksiyasi masofaviy tajovuzkorlarga pochta buyrug‘iga qo‘shimcha parametrlarni o‘tkazish va natijada yaratilgan Sender xususiyatidagi \” (teskari chiziqli qo‘sh tirnoq) orqali ixtiyoriy kodni bajarishga imkon berishi mumkin.

Vendor

Phpmailer Project

Product

Phpmailer

CVSS Score

9.8

Nashr sanasi

30-dek, 2016

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Manbalar

http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html
http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html
http://seclists.org/fulldisclosure/2016/Dec/78
http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection
http://www.securityfocus.com/archive/1/539963/100/0/threaded

Yangi kritik zaifliklar

CyberNewsUz — CVE-2016-10033