5
CVE-2002-1771
- EPSS 1.35%
- Veröffentlicht 31.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:59:57
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMatt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Matt Wright ≫ Formmail Version1.0
Matt Wright ≫ Formmail Version1.1
Matt Wright ≫ Formmail Version1.2
Matt Wright ≫ Formmail Version1.3
Matt Wright ≫ Formmail Version1.4
Matt Wright ≫ Formmail Version1.5
Matt Wright ≫ Formmail Version1.6
Matt Wright ≫ Formmail Version1.7
Matt Wright ≫ Formmail Version1.8
Matt Wright ≫ Formmail Version1.9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.679 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html
http://www.scriptarchive.com/readme/formmail.html#history
http://www.securityfocus.com/bid/3955
https://exchange.xforce.ibmcloud.com/vulnerabilities/8013