CVE-2002-0490

Published: Aug 12, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain mail message headers via numerous parameters in write.php.

Affected (5)

Products: Instant Web Mail: Instant Web Mail

Instant Web Mail

1 product

Instant Web Mail

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Instant Web Mail Instant Web Mail	Version 0.55
Instant Web Mail Instant Web Mail	Version 0.56
Instant Web Mail Instant Web Mail	Version 0.57
Instant Web Mail Instant Web Mail	Version 0.58
Instant Web Mail Instant Web Mail	Version 0.59