← Back

Joe Lumbroso Acks

joe_lumbroso_acks

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Formmail.php
formmail.php
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2004-0259
1Joe Lumbroso Acks
1Formmail.php
Apr 16, 2026
Nov 23, 2004
N/A· v4
N/A· v3
9.3 HIGH· v2
The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that co...Show more
The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.Show less