OR
     *cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* versions from (including) 1.5.0 up to (including) 3.6.5

OR
     *cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* versions up to (including) 4.7

OR
     *cpe:2.3:a:phpmailer_project:phpmailer:*:*:*:*:*:*:*:* versions up to (including) 5.2.19

OR
     *cpe:2.3:a:phpmailer_project:phpmailer:*:*:*:*:*:*:*:* versions up to (excluding) 5.2.20

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html Exploit, Third Party Advisory

http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry

http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html Exploit, Third Party Advisory

http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html Exploit, Third Party Advisory, VDB Entry

http://seclists.org/fulldisclosure/2016/Dec/81 Mailing List, Patch

http://seclists.org/fulldisclosure/2016/Dec/81 Mailing List, Patch, Third Party Advisory

http://www.securityfocus.com/archive/1/539967/100/0/threaded No Types Assigned

http://www.securityfocus.com/archive/1/539967/100/0/threaded Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1037533 No Types Assigned

http://www.securitytracker.com/id/1037533 Third Party Advisory, VDB Entry

https://www.exploit-db.com/exploits/40969/ Exploit, Third Party Advisory

https://www.exploit-db.com/exploits/40969/ Exploit, Third Party Advisory, VDB Entry

https://www.exploit-db.com/exploits/40986/ No Types Assigned

https://www.exploit-db.com/exploits/40986/ Third Party Advisory, VDB Entry

https://www.exploit-db.com/exploits/42221/ No Types Assigned

https://www.exploit-db.com/exploits/42221/ Third Party Advisory, VDB Entry

http://www.securityfocus.com/archive/1/539967/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/539967/100/0/threaded [Exploit, Patch, Third Party Advisory, VDB Entry]

https://www.exploit-db.com/exploits/40986/ [No Types Assigned]

https://www.exploit-db.com/exploits/42221/ [No Types Assigned]

http://www.securitytracker.com/id/1037533 [No Types Assigned]

The isMail transport in PHPMailer before 5.2.20, when the Sender property is not set, might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.

OR
     *cpe:2.3:a:phpmailer_project:phpmailer:5.2.19:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:phpmailer_project:phpmailer:5.2.19:*:*:*:*:*:*:* (and previous)

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html No Types Assigned

http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html Third Party Advisory, Exploit

http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection No Types Assigned

http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection Third Party Advisory, Exploit

http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html [No Types Assigned]

http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection [No Types Assigned]

OR
     *cpe:2.3:a:phpmailer_project:phpmailer:5.2.19:*:*:*:*:*:*:*

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-77

http://openwall.com/lists/oss-security/2016/12/28/1 No Types Assigned

http://openwall.com/lists/oss-security/2016/12/28/1 Mailing List, Patch

http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html No Types Assigned

http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html Third Party Advisory, Exploit

http://seclists.org/fulldisclosure/2016/Dec/81 No Types Assigned

http://seclists.org/fulldisclosure/2016/Dec/81 Mailing List, Patch

http://www.securityfocus.com/archive/1/archive/1/539967/100/0/threaded No Types Assigned

http://www.securityfocus.com/archive/1/archive/1/539967/100/0/threaded Third Party Advisory, VDB Entry, Exploit, Patch

http://www.securityfocus.com/bid/95130 No Types Assigned

http://www.securityfocus.com/bid/95130 Third Party Advisory, VDB Entry, Exploit

https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html No Types Assigned

https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html Third Party Advisory

https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.20 No Types Assigned

https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.20 Vendor Advisory, Patch

https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities No Types Assigned

https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities Vendor Advisory, Patch

https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html No Types Assigned

https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html Third Party Advisory, Exploit, Patch

https://www.exploit-db.com/exploits/40969/ No Types Assigned

https://www.exploit-db.com/exploits/40969/ Third Party Advisory, Exploit