CVE-2002-1771

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.

Affected (10)

Products: Matt Wright: Formmail

Matt Wright

1 product

Formmail

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Matt Wright Formmail	Version 1.0
Matt Wright Formmail	Version 1.1
Matt Wright Formmail	Version 1.2
Matt Wright Formmail	Version 1.3
Matt Wright Formmail	Version 1.4
Matt Wright Formmail	Version 1.5
Matt Wright Formmail	Version 1.6
Matt Wright Formmail	Version 1.7
Matt Wright Formmail	Version 1.8
Matt Wright Formmail	Version 1.9