Web application abuses : Simple Form Mail Relaying via Subject Tags Vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.14713

Category: Web application abuses

Title: Simple Form Mail Relaying via Subject Tags Vulnerability

Summary: The target is running at least one instance of Simple Form which fails; to remove newlines from variables used to construct message headers.

Description: Summary:
The target is running at least one instance of Simple Form which fails
to remove newlines from variables used to construct message headers.

Vulnerability Impact:
A remote attacker can exploit this flaw to add to the list of
recipients, enabling him to use Simple Form on the target as a proxy for sending abusive mail or spam.

Solution:
Upgrade to Simple Form 2.3 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Copyright Copyright (C) 2004 George A. Theall

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.14713
Category:	Web application abuses
Title:	Simple Form Mail Relaying via Subject Tags Vulnerability
Summary:	The target is running at least one instance of Simple Form which fails; to remove newlines from variables used to construct message headers.
Description:	Summary: The target is running at least one instance of Simple Form which fails to remove newlines from variables used to construct message headers. Vulnerability Impact: A remote attacker can exploit this flaw to add to the list of recipients, enabling him to use Simple Form on the target as a proxy for sending abusive mail or spam. Solution: Upgrade to Simple Form 2.3 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2004 George A. Theall