FreeBSD : typo3 -- email header injection (62b8f253-12d9-11dc-a35c-001485ab073e)

Olivier Dobberkau, Andreas Otto, and Thorsten Kahler report : An unspecified error in the internal form engine can be used for sending arbitrary mail headers, using it for purposes which it is not meant for, e.g. sending spam messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-1081

The start function in class.t3libformmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information...

CVE-2007-1081

The start function in class.t3libformmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information...

CVE-2007-1081

TYPO3 Mail Header Injection vulnerability (CVE-2007-1081) affects TYPO3 before 4.0.5, 4.1beta, and 4.1RC1. The start function in class.t3lib_formmail.php allows attackers to inject arbitrary email headers via unknown vectors. Public references describe this as a remote header-injection issue with...