📦

mail

Vendor: zetacomponents

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 1 Remote Access
Total CVEs 18 Total Indexed
Avg. EPSS 10.65% Exploit Prob.
Latest CVE CVE-2017-15806 Nov 15

Security Vulnerability Index

Page 1 / 2
8.1 CVSS
CVE-2017-15806
RCE Exploit Found

The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php."

EPSS: 10.65%