CVE-2006-3473

CVE-2006-3473 describes a CRLF injection vulnerability in the Drupal form_mail module, affecting versions before 1.8.2.2. An attacker could remotely inject email headers, enabling the Drupal site to be used to send spam. This issue is explicitly noted as a different issue than CVE-2006-1225. The ...