CVE-2003-0979

FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:freescripts:visitorbook:le:*:*:*:*:*:*:*

Information

Published : 2004-01-04 21:00

Updated : 2016-10-17 19:38


NVD link : CVE-2003-0979

Mitre link : CVE-2003-0979


JSON object : View

Advertisement

dedicated server usa

Products Affected

freescripts

  • visitorbook