CVEs-PoC/2008/CVE-2008-5619.md

### [CVE-2008-5619](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5619)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.

### POC

#### Reference
- https://www.exploit-db.com/exploits/7549
- https://www.exploit-db.com/exploits/7553

#### Github
- https://github.com/JamesYoungZhu/Practise
- https://github.com/clients1/mailer
- https://github.com/jatin-dwebguys/PHPMailer
- https://github.com/mitraxsou/radiant
- https://github.com/rosauceda/PHPMAILER1
- https://github.com/rosauceda/phpMail
- https://github.com/webworksinc/PHPMailer
- https://github.com/wking07/pmailer