CVE-2003-0979

FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail…

published December 11, 2003

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01154 · 66.5th percentile
Published
2003-12-11T05:00Z
EPSS history
Timeline
  • 11 DEC 05:00Z
    FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail…
    cvelistv5