CVE-2002-2109

Published: Dec 31, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.

Affected (10)

Products: Matt Wright: Formmail

Matt Wright

1 product

Formmail

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Matt Wright Formmail	Version 1.0
Matt Wright Formmail	Version 1.1
Matt Wright Formmail	Version 1.2
Matt Wright Formmail	Version 1.3
Matt Wright Formmail	Version 1.4
Matt Wright Formmail	Version 1.5
Matt Wright Formmail	Version 1.6
Matt Wright Formmail	Version 1.7
Matt Wright Formmail	Version 1.8
Matt Wright Formmail	Version 1.9