CNCVE编号:CNCVE-20010357 CVE编号:CAN-2001-0357 安全级别:中 漏洞中文描述: FormMail 1.6 及其早期版本中的FormMail.pl允许远程攻击者通过修改接收和消息参数来发送匿名邮件(垃圾邮件spam)。 漏洞英文描述: FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message paramaters. 漏洞参考: Reference: BUGTRAQ:20010310 CORRECTION to CODE: FormMail.pl can be used to send anonymous email Reference: URL:http://marc.theaimsgroup.com/?l=bugtraq&m=98433523520344&w=2 Reference: XF:formmail-anonymous-flooding Reference: URL:http://xforce.iss.n 系统类型:其他 漏洞类型:设计错误