CVE-2002-0490

Technical details (affected component, vulnerable version, exploit specifics and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0490

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to 1 execute arbitrary POP commands via the id parameter in message.php, or 2 modify certain mail message headers via numerous parameters in write.php...