Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FormMail实名CGI变量可以导致邮件滥发漏洞
Vulnerability Description
FormMail是一款使用广泛的基于WEB的邮件网关，允许基于表单输入邮寄个指定用户。用perl实现，可以运行于大多数的Linux/Unix以及Microsoft Windows等多种系统平台。 由于缺少对邮件和实名CGI变量的充分检查，可以导致远程攻击者发送匿名邮件给任何用户。 通过给SMTP头的附加域如CC:、BCC;或者TO:提交这些实名CGI变量可以进行匿名发送。
CVSS Information
N/A
Vulnerability Type
N/A