CVE-2006-0631: Undefined Security Weakness

CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "spam proxy" by modifying mail headers, including recipient e-mail addresses, via newline characters in the Subject field...

[SA18748] Mailback Mail Header Injection Vulnerability

TITLE: Mailback Mail Header Injection Vulnerability SECUNIA ADVISORY ID: SA18748 VERIFY ADVISORY: http://secunia.com/advisories/18748/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Mailback 1.x http://secunia.com/product/7712/ DESCRIPTION: coderpunk has...

mailback script exploit

There is a mailback perl cgi script that has been in use for years, originally written by Erik C. Thauvin, which has some serious sercurity holes in it. One that is currently being exploited is that the contents of the subject pass to the script from the form are not sanitized before being passed...