CVE-2016-10074

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address in the (1) From, (2) ReturnPath, or (3) Sender header.

• CWE-77

• http://packetstormsecurity.com/files/140290/SwiftMailer-Remote-Code-Execution.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2016/Dec/86Exploit, Mailing List
• http://www.debian.org/security/2017/dsa-3769
• http://www.securityfocus.com/bid/95140Third Party Advisory, VDB Entry
• https://github.com/swiftmailer/swiftmailer/blob/5.x/CHANGESPatch, Vendor Advisory
• https://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.htmlExploit, Technical Description, Third Party Advisory
• https://www.exploit-db.com/exploits/40972/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/40986/
• https://www.exploit-db.com/exploits/42221/
• http://packetstormsecurity.com/files/140290/SwiftMailer-Remote-Code-Execution.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2016/Dec/86Exploit, Mailing List
• http://www.debian.org/security/2017/dsa-3769
• http://www.securityfocus.com/bid/95140Third Party Advisory, VDB Entry
• https://github.com/swiftmailer/swiftmailer/blob/5.x/CHANGESPatch, Vendor Advisory
• https://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.htmlExploit, Technical Description, Third Party Advisory
• https://www.exploit-db.com/exploits/40972/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/40986/
• https://www.exploit-db.com/exploits/42221/

Published

Dec 30, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10069coders/mat.c in ImageMagick before 6.9.4-5 allows remote att…
• CVE-2016-1007Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat…
• CVE-2016-10070Heap-based buffer overflow in the CalcMinMax function in cod…5.5
• CVE-2016-10071coders/mat.c in ImageMagick before 6.9.4-0 allows remote att…5.5
• CVE-2016-10072WampServer 3.0.6 has two files called 'wampmanager.exe' and …5.3
• CVE-2016-10073The from method in library/core/class.email.php in Vanilla F…
• CVE-2016-10075The tqdm._version module in tqdm versions 4.4.1 and 4.10 all…
• CVE-2016-10079SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a…
• CVE-2016-1008Untrusted search path vulnerability in Adobe Reader and Acro…
• CVE-2016-10081/usr/bin/shutter in Shutter through 0.93.1 allows user-assis…
• CVE-2016-10082include/functions_installer.inc.php in Serendipity through 2…
• CVE-2016-10083Cross-site scripting (XSS) vulnerability in admin/plugin.php…