Vulnerability Details CVE-2012-0796
class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.1%
CVSS Severity
CVSS v2 Score 4.0
Products affected by CVE-2012-0796
-
cpe:2.3:a:moodle:moodle:1.9.1
-
cpe:2.3:a:moodle:moodle:1.9.10
-
cpe:2.3:a:moodle:moodle:1.9.11
-
cpe:2.3:a:moodle:moodle:1.9.12
-
cpe:2.3:a:moodle:moodle:1.9.13
-
cpe:2.3:a:moodle:moodle:1.9.14
-
cpe:2.3:a:moodle:moodle:1.9.15
-
cpe:2.3:a:moodle:moodle:1.9.2
-
cpe:2.3:a:moodle:moodle:1.9.3
-
cpe:2.3:a:moodle:moodle:1.9.4
-
cpe:2.3:a:moodle:moodle:1.9.5
-
cpe:2.3:a:moodle:moodle:1.9.6
-
cpe:2.3:a:moodle:moodle:1.9.7
-
cpe:2.3:a:moodle:moodle:1.9.8
-
cpe:2.3:a:moodle:moodle:1.9.9
-
cpe:2.3:a:moodle:moodle:2.0.0
-
cpe:2.3:a:moodle:moodle:2.0.1
-
cpe:2.3:a:moodle:moodle:2.0.2
-
cpe:2.3:a:moodle:moodle:2.0.3
-
cpe:2.3:a:moodle:moodle:2.0.4
-
cpe:2.3:a:moodle:moodle:2.0.5
-
cpe:2.3:a:moodle:moodle:2.0.6
-
cpe:2.3:a:moodle:moodle:2.1.0
-
cpe:2.3:a:moodle:moodle:2.1.1
-
cpe:2.3:a:moodle:moodle:2.1.2
-
cpe:2.3:a:moodle:moodle:2.1.3
-
cpe:2.3:a:moodle:moodle:2.2.0