Description
CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.
Remediation
References
Related Vulnerabilities
WordPress Plugin MetaSlider Cross-Site Scripting (2.6.2)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4898)
WebLogic CVE-2022-21353 Vulnerability (CVE-2022-21353)
Lighttpd Other Vulnerability (CVE-2006-0814)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.8)