← Database

CVE-2002-1917

MEDIUM CVSS: 5.0 Published: 2002-12-31 Modified: 2026-06-16

Description

CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header.

Affected Platforms

Geeklog Geeklog

Weakness Type

NVD-CWE-Other

References