Concrete CMS: Sendmail Remote Code Execution Vulnerability in Concrete5 version 5.7.3.1

Concrete5 is vulnerable to a Remote Code Execution because it fails to properly validate certain user input used as sender email address when sending out a registration notification email. This vulnerability is mitigated by the fact that it can be exploited only by authenticated administrator use...