Description
Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtained from third party information.
References
- 20515 third-party-advisory
- 18434 vdb-entry
- http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645
- ADV-2006-2234 vdb-entry
- form2mail-webform-email-header-injection(27130) vdb-entry
- JVN#39570254 third-party-advisory