CVE-2012-0796

MEDIUM · CVSS 4 EPSS 1.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-0796

Severity

MEDIUM

CVSS

EPSS

1.68%

Original Filing — NVD Description

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.