Vulnerability in Thesitewizard.com Chfeedback.pl Feedback Form Perl Script
CVE-2005-2854
CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email fields, which are injected into mail headers.
EPSS: 0.011 (61.4th percentile) — read the EPSS interpretation.
Affected products
- Thesitewizard.com Chfeedback.pl_feedback_form_perl_script — versions 2.0.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)