What’s Vulnerable › Vulnerabilities
CVE-2002-1771
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2002-12-31 · updated 2026-06-16
Description
Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.
Affected products
- Matt Wright Formmail: 1.0, 1.1, 1.2, 1.3, 1.4, 1.5 (+4)
References
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html
- http://www.scriptarchive.com/readme/formmail.html#history
- http://www.securityfocus.com/bid/3955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8013
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html
- http://www.scriptarchive.com/readme/formmail.html#history
- http://www.securityfocus.com/bid/3955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8013
Get alerted when CVE-2002-1771 or the next vulnerability affects your stack