CVE-2016-10073 The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a cra...
HighCVSS 7.5
EPSS 83.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vanillaforums vanilla | <= 2.3.0 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- exploitbox.io exploit third-party-advisory
- open.vanillaforums.com patch vendor-advisory
- 41996 exploit third-party-advisory vdb-entry