Shulou(Shulou.com)06/01 Report--

It is believed that many inexperienced people have no idea about how to reproduce the remote command execution vulnerability in PHPMailer. Therefore, this paper summarizes the causes and solutions of the problem. Through this article, I hope you can solve this problem.

I. brief introduction of loopholes

PHPMailer is a PHP email creation and transfer class for multiple open source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! Wait.

A security vulnerability exists in PHPMailer < 5.2.18 that allows remote unauthenticated attackers to execute arbitrary code in the context of the Web server user to remotely control the target web application.

Second, the affected version:

PHPMailer

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.