{"uuid": "c47ea4cf-d330-4fa7-870b-2f6c80facd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-10045", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmailer_arg_injection.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Dawid Golunski\", \"Spencer McIntyre\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"PHPMailer versions up to and including 5.2.19 are affected by a\\n          vulnerability which can be leveraged by an attacker to write a file with\\n          partially controlled contents to an arbitrary location through injection\\n          of arguments that are passed to the sendmail binary. This module\\n          writes a payload to the web root of the webserver before then executing\\n          it with an HTTP request. The user running PHPMailer must have write\\n          access to the specified WEB_ROOT directory and successful exploitation\\n          can take a few minutes.\", \"disclosure_date\": \"2016-12-26\", \"fullname\": \"exploit/multi/http/phpmailer_arg_injection\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 09:30:35 +0000\", \"name\": \"PHPMailer Sendmail Argument Injection\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/phpmailer_arg_injection.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/http/phpmailer_arg_injection\", \"references\": [\"CVE-2016-10033\", \"CVE-2016-10045\", \"EDB-40968\", \"EDB-40969\", \"URL-https://github.com/opsxcq/exploit-CVE-2016-10033\", \"URL-https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHPMailer <5.2.18\", \"PHPMailer 5.2.18 - 5.2.19\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:08.300529Z"}