0x00-0x00/CVE-2016-10033

PHPMailer < 5.2.18 Remote Code Execution Exploit

CVE-2016-10033

This vulnerability affects PHPMailer < 5.2.18 and is able to get Remote Code Execution.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10033

Usage

As it is written in Golang, you can build the exploit yourself, as long there is golang installed into your system with:

cd CVE-2016-10033
go build

Then you can use the exploit program with the following syntax:

Author

I am not the author of the CVE, but I am the author of this exploit program. If you use it, or modify it, you're not allowed to strip the credits from it.