PHPMailer as included with applications such as WordPress, Mantis, etc, suffers from a remote command execution vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57143/phpmail.txt
Source: https://packetstormsecurity.com/files/57143/phpmail.txt.html