Most recent entries from all

EUVD-2026-109972

2026-10-25T20:58:28.022019+00:00

EUVD-2026-109972

fkie_cve-2012-0796

2026-10-25T20:58:28.022049+00:00

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.

GHSA-398j-f7m7-795j — PHPMailer vulnerable to email header injection

2026-10-25T20:58:28.022079+00:00

Affected: Packagist: phpmailer/phpmailer

### Impact Arbitrary additional email headers can be injected via crafted From or Sender headers.

### Patches Fixed in 2.2.1

### Workarounds Filter user-supplied values prior to using them in From or Sender properties.

### References https://nvd.nist.gov/vuln/detail/CVE-2012-0796

### For more information If you have any questions or comments about this advisory: * Open a private issue in [the PHPMailer project](https://github.com/PHPMailer/PHPMailer)

gsd-2012-0796

2026-10-25T20:58:28.022106+00:00

gsd-2012-0796