Unscored CVE-2002-2109 EUVD-2002-2088GHSA-9r3w-hpj5-5rpw

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a…

Published Aug 5, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.

References

3954 vdb-entry
formmail-referer-header-spoof(8012) vdb-entry
http://worldwidemart.com/scripts/formmail.shtml
20020123 Anonymous Mail Forwarding Vulnerabilities in FormMail 1.9 mailing-list