VulnerabilityModified
CVE-2001-1188
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.
HIGH 7.5EPSS 5.64%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 5.64% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- brian dorricott/mailto
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/archive/1/244909Vendor Advisory
- http://www.securityfocus.com/bid/3669Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/244909Vendor Advisory
- http://www.securityfocus.com/bid/3669Exploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.