| Package | Affected versions | Patched versions |
|---|---|---|
| hastymail | = 1.0.1= 1.0.2= 1.1= 1.2≤ 1.5 |
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct SMTP session. NOTE: this is a different type of issue than CVE-2006-5262.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free