[VIM] CS-Cart issue maybe PHPMailer?
Steven M. Christey
coley at linus.mitre.org
Mon Jun 5 23:42:25 EDT 2006
might not be PHPmailer. Just downloaded phpmailer from that URL and
grepped for classes_dir - no go. So this might be an
interface/integration issue (speaking of which, is anybody else sick of
integration issues yet? I have a feeling it's gonna get worse).
Anyway, since you emailed the PHPMailer people I figured I'd send an
inquiry to the CS-Cart people at http://www.cs-cart.com/contact.php .
On Mon, 5 Jun 2006, security curmudgeon wrote:
> The example url:
> Looking at the PHPMailer package (http://phpmailer.sourceforge.net/), we
> see it has "class.phpmailer.php" in it. It is likely CS-Cart utilizes the
> free PHPMailer package and the vulnerability lies in it. I am contacting
> Brent Matzelle to ask.
More information about the VIM