Vulnerabilities > CVE-2007-4073 - Unspecified vulnerability in Tincan Webbler CMS
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- http://osvdb.org/38994
- http://osvdb.org/38994
- http://securityreason.com/securityalert/2955
- http://securityreason.com/securityalert/2955
- http://tincan.co.uk/?lid=1975
- http://tincan.co.uk/?lid=1975
- http://www.procheckup.com/Vulner_2007.php
- http://www.procheckup.com/Vulner_2007.php
- http://www.securityfocus.com/archive/1/474521/100/0/threaded
- http://www.securityfocus.com/archive/1/474521/100/0/threaded