Debian Linux Security Advisory 3416-1 - Takeshi Terada discovered a vulnerability in PHPMailer, a PHP library for email transfer, used by many CMSs. The library accepted email addresses and SMTP commands containing line breaks, which can be abused by an attacker to inject messages.
1410bd2881e97706204c2cb60bcb42189bced0ddb685460ac61f925cdffd1cb9