Vulnerability in Zend Framework
CVE-2009-4417
The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."
EPSS: 0.009 (54.8th percentile) — read the EPSS interpretation.
Affected products
- Zend Framework — versions 0.1.3, 0.1.4, 0.1.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (Exploit, x_refsource_MISC)