CVE-2003-0979 FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra he...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freescripts visitorbook | = le | No fix listed |
References
- 20031210 Visitorbook LE Multiple Vulnerabilities mailing-list
- www.westpoint.ltd.uk patch vendor-advisory