Simple Form Multiple Parameter Arbitrary Mail Relaying

The target is running at least one instance of Simple Form, which fails to validate the parameters 'adminemailto' and 'adminemailfrom'. An attacker, exploiting this flaw, would be able to send email through the server utilizing the form to any arbitrary recipient with any arbitrary message conten...