Description

The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information.

Remediation

References

CVE-2007-1081

Related Vulnerabilities

WordPress Plugin Gift Certificate Creator Cross-Site Scripting (1.0.0)

WordPress Plugin Add Link to Facebook Cross-Site Scripting (2.3)

WordPress Plugin WP Maintenance Mode Multiple Vulnerabilities (2.0.3)

LimeSurvey Incorrect Default Permissions Vulnerability (CVE-2019-16185)

PHP Improper Input Validation Vulnerability (CVE-2014-9653)

Severity

High

Classification

CVE-2007-1081

Tags

Missing Update Known Vulnerabilities