CVE-2002-1575 in cPanel

Riassunto

di MITRE

cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 10/02/2004
• Divulgazione: 03/03/2004
• Moderazione: accettato
• Voce: VDB-13363
• CPE: pronto
• CWE: CWE-269 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01387
• KEV: no
• Attività: molto basso
• Settore: Telecommunication

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1575
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1575
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1575/