CVE-2006-0712

Published: Feb 15, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, which allows remote attackers to bypass spam filters by injecting SMTP headers, probably due to a CRLF injection vulnerability.

Affected (7)

Products: Squishdot: Squishdot

Squishdot

1 product

Squishdot

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Squishdot Squishdot	Version 0.7.2
Squishdot Squishdot	Version 1.0.0
Squishdot Squishdot	Version 1.1.0
Squishdot Squishdot	Version 1.2.1
Squishdot Squishdot	Version 1.4.0
Squishdot Squishdot	Version 1.4.1
Squishdot Squishdot	Version 1.5.0