CVE-2002-0751 CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgiscript.net csmailto | All versions | No fix listed |
References
- 20020423 CGIscript.net - csMailto.cgi - Remote Command Execution exploit mailing-list vendor-advisory
- www.cgiscript.net vendor-advisory
- 4579 exploit vdb-entry vendor-advisory