CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2)…

published August 5, 2005

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02686 · 85.7th percentile
Published
2005-08-05T04:00Z
EPSS history
Timeline
  • 05 AUG 04:00Z
    Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2)…
    cvelistv5