CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and previous versions, and 1.1 before RC4, allows remote malicious users to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
oliver georgi phpwcms |