NVD

Id
61628  
Name
CVE-2006-2944  
Description
Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-12  
Modified Date
2011-03-07  
Seq
2006-2944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319036 61628 CVE-2006-2944 JVN#39570254  View
319037 61628 CVE-2006-2944 http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645  View
319038 61628 CVE-2006-2944 18434  View
319039 61628 CVE-2006-2944 ADV-2006-2234  View
319040 61628 CVE-2006-2944 form2mail-webform-email-header-injection(27130)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58428 JVNDB-2006-000624 CGI RESCUE 製 FORM2MAIL においてメールの不正送信が可能な脆弱性 CGI RESCUE より提供されている FORM2MAIL にはメールのヘッダ部分へ挿入される入力値の検査が適切に行なわれないことにより、任意の宛先へメールの送信に利用される脆弱性が存在します。 CVE-2006-2944 19046 CVE-2006-2944 61628 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000624.html 2006-06-09 2007-04-01 View