PHPMailer prior to 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
phpmailer project phpmailer |
||
fedoraproject fedora 31 |
||
fedoraproject fedora 32 |
||
canonical ubuntu linux 18.04 |
||
debian debian linux 8.0 |
||
debian debian linux 9.0 |