Vulnerability in Phpxmail

CVE-2005-2183

class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.

EPSS: 0.014 (69.8th percentile) — read the EPSS interpretation.

Affected products

  • Phpxmail — versions 0.7, 1.1
  • N/a — versions n/a

References