← Database

CVE-2006-0631

MEDIUM CVSS: 5.0 Published: 2006-02-10 Modified: 2026-06-16

Description

CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "spam proxy" by modifying mail headers, including recipient e-mail addresses, via newline characters in the Subject field.

Affected Platforms

Erik C. Thauvin Mailback

Weakness Type

NVD-CWE-Other

References