osclass / Osclass

With Osclass, get your own classifieds site for free. Build your own Osclass installation and start advertising real estate, jobs or whatever you want- in minutes!
http://osclass.org/
648 stars 344 forks source link

PHPMailer versions prior to 5.2.22 have a local file disclosure vulnerability #2271

Open neo74 opened 6 years ago

neo74 commented 6 years ago

PHPMailer 5.2 (which is compatible with PHP 5.0 - 7.0) is no longer being supported for feature updates, and will only be receiving security updates from now on. (Osclass use 5.2.21) ..... (The easiest way is to replace only class.xxxxxx.php files of the folder Osclass/oc-includes/phpmailer/ with 3 files from here: 5.2.26) ....., we recommend you make the necessary changes to switch to the 6.0 release. (or the best way to close all holes and implementation of new extras) Upgrading from PHPMailer 5.2 to 6.0 Cheers!