CVE-2016-10074

This exploit targets PHPMailer, SwiftMailer, and Zend Framework mail libraries to achieve remote code execution via command injection in the email address field. It leverages Exim MTA's expansion mode and base64 encoding to bypass input validation and execute a reverse shell.

This exploit targets multiple vulnerabilities in PHPMailer, SwiftMailer, and Zend-mail to achieve remote code execution via a contact form. It uploads a PHP backdoor containing a reverse shell payload to the target server.

This exploit leverages a parameter injection vulnerability in SwiftMailer to execute arbitrary commands via the sendmail MTA. It injects malicious parameters into the 'From' field to write a PHP payload to a writable directory.