| Package | Affected versions | Patched versions |
|---|---|---|
| cgiemail | = 1.6 |
cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free