Beveiligingsadvies

CVE-2003-0979

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2003-12-11 05:00:00

Laatst bijgewerkt 2024-08-08 02:12:35

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.

← Alle CVE's bekijken Bekijk op cve.org ↗