1 Video for CVE-2016-10033: PHPMailer RCE

PRO
Tier
Medium
Medium
3803 completed
Return to Exercise
image of exercise CVE-2016-10033: Exploitation

This video requires PentesterLab PRO

GO PRO
Spoiler
CVE-2016-10033: Exploitation

In this video, we explore the CVE-2016-10033 vulnerability found in PHPMailer, which allows attackers to execute arbitrary code by injecting extra parameters into the sendmail command. We demonstrate how to exploit this vulnerability to create a PHP file in the web root of the server and execute commands through a simple web shell.

video duration icon04:15 number of views icon3934