Description
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1) the Recommend feature, Email Article (2) senders and (3) recipients, (4) New User Approval, (5) Edit Profiles, (6) the Newsletter Subscription form, (7) the Recommend form, and (8) sending of articles, which has unknown impact, and remote attack vectors related to spam attacks and possibly other attacks.
References
- 33284 vdb-entry
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
- ADV-2007-0604 vdb-entry
- 24080 third-party-advisory
- 22563 vdb-entry