Exploit for Argument Injection in Phpmailer Project Phpmailer CVE-2016-10033 CVE-2016-6195 CVE-2017-12149 CVE-2017-12615 CVE-2017-12617 CVE-2017-15412

gitee · 2019-12-05

Description

Perl exploit suite targeting multiple CVEs including PHPMailer remote code execution, SQL injection, deserialization, and Tomcat PUT vulnerabilities.

Entry point

ParameterHost · header

Pathvanilla2-3/entry/passwordrequest

Unauthenticated RCE via PHPMailer <5.2.18 triggered by Host header injection in Vanilla Forums <=2.3 (CVE-2016-10033).

Affected software

Phpmailer Project Phpmailer< 5.2.18

Vbulletin≤ 4.2.2, 4.2.3

Redhat Jboss Enterprise Application Platform All versions

All known vulnerabilities by product

Alt Linux Linuxmint Phpmailer Ubuntu Wordpress Vbulletin Red Hat Jboss Enterprise Application Platform Red Hat Jboss Application Server

CVSS Score

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 50 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-23

Exploit Details

Modified:2019-12-05 14:28

Last Seen:2025-09-17 13:25

Reporter:Optic_Fiber

Tags

phpmailer vulnerabilityremote code executionsql injectiondeserialization issuetomcat vulnerabilityput vulnerabilityperl exploits

Other exploits for the same CVE

Exploit for Argument Injection in Phpmailer_Project Phpmailer

2026-07-24 blue-chocolatesGITHUB

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat

2026-07-03 K3ysTr0K3RGITHUB

Nessus-CVE-POC-Finder

2026-06-30 e-finGITHUB

Exploit for Argument Injection in Phpmailer_Project Phpmailer

2026-03-26 iamKimlongGITHUB

Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform

2026-01-01 galois17GITHUB

Exploit for Argument Injection in Phpmailer_Project Phpmailer

2025-07-27 mirrors_opsxcqGITEE

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat

2025-07-06 mirrors_cyberheartmi9GITEE

2024-09-01 Zach Grace, Tyler Krpata, metasploit.comPACKETSTORMRuby

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=686CD7D3-003C-5492-949E-F7D02DE3BC16
This repository contains a collection of Perl scripts, each targeting a specific vulnerability. The vulnerabilities include:

1. CVE-2016-10033: A remote code execution vulnerability in PHPMailer before 5.2.18.
2. CVE-2016-6195: A SQL injection vulnerability in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1.
3. CVE-2017-12149: A deserialization of untrusted data vulnerability in JBoss Application Server as shipped with Red Hat Enterprise Application Platform 5.2.
4. CVE-2017-12615 and CVE-2017-12617: A PUT JSP vulnerability in Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46, and 7.0.0 to 7.0.81.
5. CVE-2017-15412: A reserved vulnerability, with no details available.

The scripts are designed to exploit these vulnerabilities, and each script includes a README file that provides information about the vulnerability, including the CVE ID, affected