News for hackers. Stuff that matters.

A comment on PHPMailer RCE.

Re:PHPMailer RCE by cebe on Monday December 26, 2016 @09:24PM (#13260888)
In case anyone needs this:

A script for finding vulnerable versions of PHPMailer on a server:

https://gist.github.com/cebe/d0f5631b432c520a2e6f6be8beddf11...

Finds also really old versions like 2.0.4.

[ Parent | on HN ]
Re:PHPMailer RCE by etcet on Monday December 26, 2016 @09:35PM (#13260923)
Find is a powerful tool:

    find /var/www -name 'class.phpmailer.php' -print -exec grep -ni '%s["'\''], $this->Sender' {} \;
[ Parent | on HN ]