=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== libphp-phpmailer-6.1.8/SECURITY.md-24- libphp-phpmailer-6.1.8/SECURITY.md:25:PHPMailer didn't sanitise the `$lang_path` parameter in `SetLanguage`. This wasn't a problem in itself, but some apps (PHPClassifieds, ATutor) also failed to sanitise user-provided parameters passed to it, permitting semi-arbitrary local file inclusion, reported in [CVE-2010-4914](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4914), [CVE-2007-2021](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2021) and [CVE-2006-5734](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-5734). libphp-phpmailer-6.1.8/SECURITY.md-26- ############################################## libphp-phpmailer-6.1.8/src/PHPMailer.php-531- * libphp-phpmailer-6.1.8/src/PHPMailer.php:532: * If set, takes precedence over `$DKIM_private`. libphp-phpmailer-6.1.8/src/PHPMailer.php-533- * ############################################## libphp-phpmailer-6.1.8/src/PHPMailer.php-854- */ libphp-phpmailer-6.1.8/src/PHPMailer.php:855: private function mailPassthru($to, $subject, $body, $header, $params) libphp-phpmailer-6.1.8/src/PHPMailer.php-856- { ############################################## libphp-phpmailer-6.1.8/src/PHPMailer.php-1658- foreach ($this->SingleToArray as $toAddr) { libphp-phpmailer-6.1.8/src/PHPMailer.php:1659: $mail = @popen($sendmail, 'w'); libphp-phpmailer-6.1.8/src/PHPMailer.php-1660- if (!$mail) { ############################################## libphp-phpmailer-6.1.8/src/PHPMailer.php-1681- } else { libphp-phpmailer-6.1.8/src/PHPMailer.php:1682: $mail = @popen($sendmail, 'w'); libphp-phpmailer-6.1.8/src/PHPMailer.php-1683- if (!$mail) { ############################################## libphp-phpmailer-6.1.8/src/PHPMailer.php-1813- foreach ($toArr as $toAddr) { libphp-phpmailer-6.1.8/src/PHPMailer.php:1814: $result = $this->mailPassthru($toAddr, $this->Subject, $body, $header, $params); libphp-phpmailer-6.1.8/src/PHPMailer.php-1815- $this->doCallback($result, [$toAddr], $this->cc, $this->bcc, $this->Subject, $body, $this->From, []); ############################################## libphp-phpmailer-6.1.8/src/PHPMailer.php-1817- } else { libphp-phpmailer-6.1.8/src/PHPMailer.php:1818: $result = $this->mailPassthru($to, $this->Subject, $body, $header, $params); libphp-phpmailer-6.1.8/src/PHPMailer.php-1819- $this->doCallback($result, $this->to, $this->cc, $this->bcc, $this->Subject, $body, $this->From, []); ############################################## libphp-phpmailer-6.1.8/src/PHPMailer.php-4355- * Usage Example: libphp-phpmailer-6.1.8/src/PHPMailer.php:4356: * `$mail->set('SMTPSecure', static::ENCRYPTION_STARTTLS);` libphp-phpmailer-6.1.8/src/PHPMailer.php-4357- * is the same as: libphp-phpmailer-6.1.8/src/PHPMailer.php:4358: * `$mail->SMTPSecure = static::ENCRYPTION_STARTTLS;`. libphp-phpmailer-6.1.8/src/PHPMailer.php-4359- *