Description
CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php.
References
- 26384 vdb-entry
- http://www.comscripts.com/scripts/php.cs-forum.643.html
- 20534 third-party-advisory
- csforum-ajouter-header-injection(27177) vdb-entry
- ADV-2006-2314 vdb-entry
- http://www.acid-root.new.fr/advisories/csforum081.txt