Vulnerability in Brian Dorricott Mailto

CVE-2001-1188

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.

EPSS: 0.056 (92.2th percentile) — read the EPSS interpretation.

Affected products

Brian_dorricott Mailto — versions 1.0.7, 1.0.8, 1.0.9
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)