Unscored CVE-2005-2854 EUVD-2005-2855GHSA-8v3f-v4gp-j935

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script a…

Published Sep 8, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email fields, which are injected into mail headers.

References

14749 vdb-entry
20050905 thesitewizard.com chfeedback.pl CRLF Injection mailing-list