<!--
/************************************************************************************\
|                                                                                    |
|   ██╗███╗   ██╗████████╗███████╗██████╗ ███╗   ██╗███████╗████████╗                |
|   ██║████╗  ██║╚══██╔══╝██╔════╝██╔══██╗████╗  ██║██╔════╝╚══██╔══╝                |
|   ██║██╔██╗ ██║   ██║   █████╗  ██████╔╝██╔██╗ ██║█████╗     ██║                   |
|   ██║██║╚██╗██║   ██║   ██╔══╝  ██╔══██╗██║╚██╗██║██╔══╝     ██║                   |
|   ██║██║ ╚████║   ██║   ███████╗██║  ██║██║ ╚████║███████╗   ██║                   |
|   ╚═╝╚═╝  ╚═══╝   ╚═╝   ╚══════╝╚═╝  ╚═╝╚═╝  ╚═══╝╚══════╝   ╚═╝                   |
|                                                                                    |
|   ███╗   ███╗ ██████╗      ██╗███████╗████████╗███████╗██████╗                     |
|   ████╗ ████║██╔═══██╗     ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗                    |
|   ██╔████╔██║██║   ██║     ██║███████╗   ██║   █████╗  ██████╔╝                    |
|   ██║╚██╔╝██║██║   ██║██   ██║╚════██║   ██║   ██╔══╝  ██╔══██╗                    |
|   ██║ ╚═╝ ██║╚██████╔╝╚█████╔╝███████║   ██║   ███████╗██║  ██║                    |
|   ╚═╝     ╚═╝ ╚═════╝  ╚════╝ ╚══════╝   ╚═╝   ╚══════╝╚═╝  ╚═╝                    |
|                                                                                    |
|====================================================================================|
|                                                                                    |
|                  ░▒▓  THE CRADLE OF SLOVENIAN INTERNET SCENE  ▓▒░                  |
|                                                                                    |
|====================================================================================|
|                                                                                    |
|                       ⚡ RESTORED WITH LOVE ❤️ IN 2025 BY ⚡                         |
|                           TIMOTEJ • NIKI • ZAN                                     |
|                                                                                    |
|         This forum was THE meeting point for Slovenian webmasters,                 |
|        developers, designers, and internet enthusiasts in the late 2000s.          |
|           A digital gathering place where knowledge was shared,                    |
|              careers were launched, and friendships were forged.                   |
|                                                                                    |
|                 In 2025, with hearts full of nostalgia and joy,                    |
|               we brought it back to life. For the memories. For                    |
|              the community. For the love of the good old days.                     |
|                                                                                    |
|====================================================================================|
|                                                                                    |
|                  🏗️  Built with Laravel • Powered by Memories  💾                   |
|                       🌟  Made in Slovenia • 2025  🌟                               |
|                                                                                    |
\************************************************************************************/
-->
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes">
    <meta name="mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-status-bar-style" content="default">
    <title>Ranljivost v knjižnici PHPMailer &lt; 5.2.18 - Internet Mojster</title>
	<link rel="icon" type="image/x-icon" href="/favicon.ico">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style.css?v=1789197562">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-new.css?v=1789197562">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-panel.css?v=1789197562">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-responsive.css?v=1789197562">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-profile-mobile.css?v=1789197562">
    <link rel="stylesheet" href="https://internetmojster.com/styles/subscription.css?v=1789197562">
    <link rel="stylesheet" href="https://internetmojster.com/styles/jobs.css?v=1789197562">
    <script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
    <script src="https://internetmojster.com/js/scripts.js"></script>
    <script src="https://internetmojster.com/js/mobile.js"></script>

    <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
    new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
    j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
    'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
    })(window,document,'script','dataLayer','GTM-KGVKX3ZD');</script>
    <script src="https://internetmojster.com/tinymce/js/tinymce/tinymce.min.js"></script>
    
    <link rel="stylesheet" href="https://internetmojster.com/styles/image-uploader.css">
    </head>
<body class="vz">
    <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KGVKX3ZD"
    height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
    <div id="container">
        <div id="head">
            <a href="https://internetmojster.com" id="home" title="Domov">&nbsp;</a>
            <ul>
                <li class="">
                    <a href="https://internetmojster.com">Domov</a>
                </li>
                
                <li id="search"><a href="#" data-popup="search">Iskanje</a></li>
                <li class="">
                    <a href="https://internetmojster.com/zaposlitve">Zaposlitve</a>
                </li>
                                                        <li id="register"><a href="https://internetmojster.com/registracija">Registracija</a></li>
                    <li id="login"><a href="https://internetmojster.com/prijava">Prijava</a></li>
                
                            </ul>
            <h1>Ranljivost v knjižnici PHPMailer &amp;lt; 5.2.18</h1>
        </div>

        <div class="container">
            <div id="content">
    <div id="topads">&nbsp;</div>


    <div id="forum">
                <div class="nav">
            <div class="bc">
                <a href="https://internetmojster.com">Domov</a> &gt;
                <a href="https://internetmojster.com/cms" class="top">Sistemi za urejanje spletnih trgovin in strani</a> &gt;
                <a href="https://internetmojster.com/cms/ranljivost-knjiznici-phpmailer-18" class="top">Ranljivost v knjižnici PHPMailer &lt; 5.2.18</a>
            </div>

            <!-- Pagination -->
            <div class="page">
                stran 1 od 1
                                    <span class="first">|&lt;</span>
                    <span class="prev">&lt;</span>
                
                
                                                            <span class="p">1</span>
                                    
                
                                    <span class="next">&gt;</span>
                    <span class="last">&gt;|</span>
                            </div>
        </div>

        <table class="forum" id="thread">
            <colgroup class="post">
                <col class="user" />
                <col class="content" />
            </colgroup>

            <thead>
                <tr class="head">
                    <th colspan="2" class="main first last">Ranljivost v knjižnici PHPMailer &lt; 5.2.18</th>
                </tr>
                <tr class="hsep">
                    <td colspan="2">&nbsp;</td>
                </tr>
            </thead>

                            <tbody id="body287866">
                <tr class="post">
                    <!-- USER COLUMN -->
                    <td class="user first" rowspan="2">
                                                                                <a href="https://internetmojster.com/uporabnik/dal/teme" class="user">dal</a>
                            <span class="ts">26. dec 2016 19:39:16</span>
                            <span class="add">
                                Pridružen od:<br />
                                6. jun 2010<br />
                                150 objav<br />
                            </span>
                           <span class="rate" id="user-rate-2063">
                                <span class="tup">87</span>
                                <span class="tdn">1</span>
                                <span class="spm">2</span>
                            </span>
                                            </td>

                    <!-- POST CONTENT -->
                    <td class="content last">
                        <div class="inner" id="post287866">
                            <a id="p287866" href="#p287866" class="pnum">#1</a>
                            <p>V knjižnici PHPMailer je bila odkrita kritična ranljivost. Knjižnico sicer uporabljajo tudi mnogi CMS-i, med njimi WordPress, Drupal, Joomla!, tako da so v prihodnjih dneh pričakovane posodobitve tudi zanje.</p><br />
<br />
<p><a href="https://isc.sans.edu/diary/21855">Critical security update: PHPMailer 5.2.18 (CVE-2016-10033)</a></p><br />

                        </div>
                        <div class="submit_buttons">
                            <div class="rate"
                                data-user-id="2063"
                                data-post-id="287866"
                                data-thread="ranljivost-knjiznici-phpmailer-18"
                                data-category="cms"
                                data-voted=""
                                >
                                <span class="tup vote " data-type="thumbup">všeč</span><small>(3)</small>
                                <span class="tdn vote " data-type="thumbdown">ni všeč</span><small>(0)</small>
                                <span class="spm vote " data-type="spam">spam</span><small>(0)</small>
                            </div>
                                                    </div>
                                                    <div class="sig"><a href="https://www.kabi.info/Google-Apps-for-Business/" target="_blank" rel="noopener noreferrer">Google G Suite</a> | <a href="https://nepremicnine.si21.com" target="_blank" rel="noopener noreferrer">Nepremičnine Si21</a> | <a href="https://www.novogradnje.com/" target="_blank" rel="noopener noreferrer">Novogradnje Slovenija</a></div>
                                            </td>
                </tr>
                <tr class="post">
                    <td class="menu last">&nbsp;</td>
                </tr>
                <tr class="psep">
                    <td colspan="3">&nbsp;</td>
                </tr>
                </tbody>
                    </table>

        <div class="nav">
            <div class="bc">
                <a href="https://internetmojster.com">Domov</a> &gt;
                <a href="https://internetmojster.com/cms" class="top">Sistemi za urejanje spletnih trgovin in strani</a> &gt;
                <a href="https://internetmojster.com/cms/ranljivost-knjiznici-phpmailer-18" class="top">Ranljivost v knjižnici PHPMailer &lt; 5.2.18</a>
            </div>

            <!-- Pagination -->
            <div class="page">
                stran 1 od 1
                                    <span class="first">|&lt;</span>
                    <span class="prev">&lt;</span>
                
                
                                                            <span class="p">1</span>
                                    
                
                                    <span class="next">&gt;</span>
                    <span class="last">&gt;|</span>
                            </div>
        </div>
        
        <div id="bottomads">&nbsp;</div>

<div id="topadsrepl">
            
        <div class="left">
            <div class="ad ad-space-1">
                <a href="https://internetmojster.com/novice/internet-mojster-je-nazaj-1760371354" class="ad-announcement">
                    <div class="ad-icon">🎉</div>
                    <div class="ad-content">
                        <div class="ad-title">Internet Mojster je nazaj!</div>
                        <div class="ad-subtitle">Preberite zgodbo o oživitvi legendarne slovenske spletne skupnosti</div>
                    </div>
                    <div class="ad-arrow">→</div>
                </a>
            </div>
        </div>
        <div class="right">
            <div class="ad ad-space-2">
                                
                                    <a href="https://internetmojster.com/zaposlitve" class="ad-job-fallback">
                        <div class="job-content">
                            <div class="job-title">Išči med razpoložljivimi zaposlitvami</div>
                            <div class="job-subtitle">Odkrijte priložnosti za delo v digitalni industriji</div>
                        </div>
                        <div class="job-arrow">→</div>
                    </a>
                            </div>
        </div>
    </div>
    </div>
</div>
                <!-- Login prompt for guests -->
            <div class="notification_box">
                <p>
                    🔒 Za odgovor na to temo se moraš prijaviti.
                </p>
                <a href="https://internetmojster.com/prijava" class="button1">
                    Prijavi se
                </a>
            </div>
                </div>
    </div>
    
    <!-- Ad Spaces Above Footer -->
    <div id="footer-ads">
        <div id="topadsrepl">
            
                
        <div class="left">
            <div class="ad ad-space-1">
                                    <a href="https://internetmojster.com/zaposlitve" class="ad-job-fallback">
                        <div class="job-content">
                            <div class="job-title">Išči med razpoložljivimi zaposlitvami</div>
                            <div class="job-subtitle">Odkrijte priložnosti za delo v digitalni industriji</div>
                        </div>
                        <div class="job-arrow">→</div>
                    </a>
                            </div>
        </div>
        <div class="right">
            <div class="ad ad-space-2">
                                    <a href="https://internetmojster.com/zaposlitve" class="ad-job-fallback">
                        <div class="job-content">
                            <div class="job-title">Išči med razpoložljivimi zaposlitvami</div>
                            <div class="job-subtitle">Odkrijte priložnosti za delo v digitalni industriji</div>
                        </div>
                        <div class="job-arrow">→</div>
                    </a>
                            </div>
        </div>
    </div>
    </div>
    
    <div id="foot">
        powered by Internet Mojster © 2006-2026 :
        <a href="https://internetmojster.com/pravila">pravila obnašanja</a> :
        <a href="https://internetmojster.com/pogoji">pogoji uporabe</a> :
        <a href="https://internetmojster.com/kontakt">kontakt</a> :
        <a href="https://internetmojster.com/piskotki">piškotki</a>
    </div>

    <div id="popup_backdrop" class="popup_backdrop"></div>
	<div id="popup_auth" class="popup" >
		<div class="popup_header">
			<div id="popup_close" class="popup_close">× zapri</div>
		</div>
		<table>
			<tr>
                <td class="login">
                    <h2>Prijava</h2>
                    <form action="https://internetmojster.com/prijava" method="post">
                        <input type="hidden" name="_token" value="flzXnbfVNAAIWJwy3VbH6bUbHjralihQljZq2Ilh" autocomplete="off">                                                <p><input class="text" type="text" name="username" placeholder="uporabniško ime"></p>
                        <p><input class="text" type="password" name="password" placeholder="geslo"></p>
                        <p class="options">
                            <label><input type="checkbox" name="remember"> zapomni si me</label>
                        </p>
                        <p style="text-align:right; margin-top:6px;">
                            <button type="submit">prijava</button>
                        </p>
                    </form>
                </td>
                <td class="reg">
                    <h2>Registracija</h2>
                    <p>Še nimate računa? <a href="https://internetmojster.com/registracija">Ustvari nov račun</a>.</p>
                </td>
			</tr>
		</table>
	</div>
	<div id="popup_search" class="popup" >
		<div class="popup_header">
			<div id="popup_close" class="popup_close">× zapri</div>
		</div>
		<table>
			<tr>
			<td>
				<h2>Iskanje</h2>
				<form action="https://internetmojster.com/iskanje" method="get">
                    <p><input class="text" type="text" name="q" placeholder="išči…" style="width:260px"></p>
                    <div class="submit_buttons">
                        <button type="submit" class="button1">išči</button>
                    </div>
				</form>
			</td>
			</tr>
		</table>
	</div>

    <div id="cookie-notice" class="cookie-notice hidden">
            <div class="cookie-content">
                <p>
                    🍪 Ta spletna stran uporablja piškotke za izboljšanje uporabniške izkušnje.
                    <a href="https://internetmojster.com/piskotki" target="_blank">Več o piškotkih</a>.
                </p>
                <div class="cookie-buttons">
                    <button id="cookie-accept" class="button1">Sprejmi</button>
                    <button id="cookie-decline" class="button2">Zavrni</button>
                </div>
            </div>
        </div>

    <script>/*
        // Initialize TinyMCE for content creation and editing
        document.addEventListener('DOMContentLoaded', function() {
            // Initialize WYSIWYG editor for thread content
            if (document.getElementById('content')) {
                // Remove required attribute to prevent validation issues
                document.getElementById('content').removeAttribute('required');
                
                tinymce.init({
                    selector: '#content',
                    height: 300,
                    menubar: false,
                    plugins: [
                        'advlist', 'autolink', 'lists', 'link', 'image', 'charmap',
                        'anchor', 'searchreplace', 'visualblocks', 'code', 'fullscreen',
                        'insertdatetime', 'media', 'table', 'preview', 'help', 'wordcount'
                    ],
                    toolbar: 'undo redo | blocks | ' +
                        'bold italic forecolor | alignleft aligncenter ' +
                        'alignright alignjustify | bullist numlist outdent indent | ' +
                        'smiley-btn | removeformat | help',
                    content_style: 'body { font-family: Arial, sans-serif; font-size: 14px; }',
                    setup: function(editor) {
                        // Add custom smiley button
                        editor.ui.registry.addButton('smiley-btn', {
                            text: '😊',
                            tooltip: 'Insert Smiley',
                            onAction: function() {
                                showSmileyPicker(editor);
                            }
                        });
                    }
                });
            }

            // Initialize WYSIWYG editor for reply content
            if (document.getElementById('reply-content')) {
                // Remove required attribute to prevent validation issues
                document.getElementById('reply-content').removeAttribute('required');
                
                tinymce.init({
                    selector: '#reply-content',
                    height: 200,
                    menubar: false,
                    plugins: [
                        'advlist', 'autolink', 'lists', 'link', 'charmap',
                        'anchor', 'searchreplace', 'visualblocks', 'code',
                        'insertdatetime', 'table', 'help', 'wordcount'
                    ],
                    toolbar: 'undo redo | blocks | ' +
                        'bold italic forecolor | alignleft aligncenter ' +
                        'alignright alignjustify | bullist numlist | ' +
                        'link | smiley-btn | removeformat | help',
                    content_style: 'body { font-family: Arial, sans-serif; font-size: 14px; }',
                    setup: function(editor) {
                        // Add custom smiley button
                        editor.ui.registry.addButton('smiley-btn', {
                            text: '😊',
                            tooltip: 'Insert Smiley',
                            onAction: function() {
                                showSmileyPicker(editor);
                            }
                        });
                    }
                });
            }
            
            // Handle all form submissions that might contain TinyMCE editors
            document.addEventListener('submit', function(e) {
                // Check if this form contains any TinyMCE editors
                const form = e.target;
                const textareas = form.querySelectorAll('textarea');
                let hasValidationErrors = false;
                
                textareas.forEach(function(textarea) {
                    // Check if this textarea has been replaced by TinyMCE
                    if (tinymce.get(textarea.id)) {
                        const editor = tinymce.get(textarea.id);
                        
                        // Sync the TinyMCE content back to the textarea
                        editor.save();
                        
                        // Check if content is required and empty
                        const content = editor.getContent({format: 'text'}).trim();
                        if (textarea.hasAttribute('data-required') && !content) {
                            e.preventDefault();
                            hasValidationErrors = true;
                            
                            // Show error message
                            alert('Please enter some content before submitting.');
                            
                            // Focus the editor
                            editor.focus();
                            
                            return false;
                        }
                    }
                });
                
                if (hasValidationErrors) {
                    return false;
                }
            });
            
            // Smiley picker functionality
            window.showSmileyPicker = function(editor) {
                // Define classic phpBB-style smileys
                const smileys = {
                    'Happy': [':)', ':D', ':P', ';)', ':lol:'],
                    'Sad': [':(', ":'(", ':cry:'],
                    'Other': [':o', ':shock:', '8)', ':cool:', ':|', ':oops:', ':mrgreen:']
                };
                
                let pickerHtml = '<div style="padding: 10px; max-width: 300px;">';
                pickerHtml += '<h4 style="margin: 0 0 10px 0; color: #333;">Insert Smiley</h4>';
                
                for (const [category, codes] of Object.entries(smileys)) {
                    pickerHtml += `<div style="margin-bottom: 10px;">`;
                    pickerHtml += `<strong style="font-size: 12px; color: #666; display: block; margin-bottom: 5px;">${category}</strong>`;
                    
                    codes.forEach(function(code) {
                        const unicode = getSmileyUnicode(code);
                        pickerHtml += `<span style="cursor: pointer; padding: 5px; margin: 2px; display: inline-block; border-radius: 3px; border: 1px solid #ddd; background: #f9f9f9; font-size: 16px;" onclick="insertSmiley('${code}', '${editor.id}')" title="${code}">${unicode}</span>`;
                    });
                    
                    pickerHtml += '</div>';
                }
                
                pickerHtml += '</div>';
                
                editor.windowManager.open({
                    title: 'Insert Smiley',
                    body: {
                        type: 'panel',
                        items: [{
                            type: 'htmlpanel',
                            html: pickerHtml
                        }]
                    },
                    buttons: [
                        {
                            type: 'cancel',
                            text: 'Close'
                        }
                    ]
                });
            };
            
            window.insertSmiley = function(code, editorId) {
                const editor = tinymce.get(editorId);
                if (editor) {
                    editor.insertContent(' ' + code + ' ');
                    editor.windowManager.close();
                }
            };
            
            window.getSmileyUnicode = function(code) {
                const unicodeMap = {
                    ':)': '🙂', ':D': '😀', ':P': '😛', ';)': '😉', ':lol:': '😂',
                    ':(': '🙁', ":'(": '😢', ':cry:': '😢',
                    ':o': '😮', ':shock:': '😱', '8)': '😎', ':cool:': '😎', 
                    ':|': '😐', ':oops:': '😳', ':mrgreen:': '😀'
                };
                return unicodeMap[code] || code;
            };
        });*/
    </script>
    <script src="https://internetmojster.com/js/image-uploader.js"></script>
<script>
document.addEventListener('DOMContentLoaded', function () {
    const hash = window.location.hash;

    if (hash && hash.startsWith('#p')) {
        const postId = hash.substring(2); // remove "#p"
        const postEl = document.getElementById('p' + postId);

        if (postEl) {
            // Post is already rendered on this page → scroll to it
            postEl.scrollIntoView({ behavior: 'smooth' });

            // Optional highlight
            postEl.style.transition = 'color 0.5s';
            postEl.style.color = '#075C85';
            setTimeout(() => postEl.style.color = '', 1000);
        } else {
            // Post is not on this page → fetch its page and redirect
            fetch(`/api/post-locator/${postId}`)
                .then(res => res.json())
                .then(data => {
                    const targetPage = data.page;

                    const url = new URL(window.location.href);
                    const currentPage = parseInt(url.searchParams.get('page') || '1');

                    if (currentPage !== targetPage) {
                        url.searchParams.set('page', targetPage);
                        window.location.href = url.toString(); // will re-run this script after reload
                    }
                });
        }
    }

    // Voting logic
    document.querySelectorAll('.rate').forEach(rateBox => {

        if (rateBox.dataset.disabled === 'true') return;

        const postId = rateBox.dataset.postId;
        const voted = rateBox.dataset.voted;

        const voteElements = rateBox.querySelectorAll('.vote');

        voteElements.forEach(btn => {
            if (voted) {
                if (btn.dataset.type === voted) {
                    btn.classList.add('active');
                } else {
                    btn.classList.add('inactive');
                }
            }

            btn.addEventListener('click', () => {
                const threadSlug = rateBox.dataset.thread;
                const categorySlug = rateBox.dataset.category;
                const userId = rateBox.dataset.userId;

                fetch(`/${categorySlug}/${threadSlug}/${postId}/glasuj`, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                        'X-CSRF-TOKEN': 'flzXnbfVNAAIWJwy3VbH6bUbHjralihQljZq2Ilh'
                    },
                    body: JSON.stringify({ type: btn.dataset.type })
                })
                .then(res => res.json())
                .then(data => {
                    if (data.success) {
                        voteElements.forEach(el => {
                            el.classList.remove('active', 'inactive');
                            if (data.current && el.dataset.type === data.current) {
                                el.classList.add('active');
                            } else if (data.current) {
                                el.classList.add('inactive');
                            }
                        });

                        rateBox.querySelector('.tup + small').textContent = `(${data.counts.thumbup})`;
                        rateBox.querySelector('.tdn + small').textContent = `(${data.counts.thumbdown})`;
                        rateBox.querySelector('.spm + small').textContent = `(${data.counts.spam})`;

                        if (userId && data.user_counts) {
                            const userStatsBoxes = document.querySelectorAll(`#user-rate-${userId}`);
                            userStatsBoxes.forEach(userBox => {
                                userBox.querySelector('.tup').textContent = data.user_counts.thumbup;
                                userBox.querySelector('.tdn').textContent = data.user_counts.thumbdown;
                                userBox.querySelector('.spm').textContent = data.user_counts.spam;
                            });
                        }
                    }
                });
            });
        });
    });
});
</script>
</body>
</html>