Simple Form Unauthorized Mail Relay Vulnerability

Bugtraq ID:	10917
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 09 2004 12:00AM
Updated:	Aug 09 2004 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	The World Community Network Simple Form 2.1 The World Community Network Simple Form 2.0 The World Community Network Simple Form 1.1 The World Community Network Simple Form 1.0
Not Vulnerable:	The World Community Network Simple Form 2.2

Simple Form Unauthorized Mail Relay Vulnerability

Simple Form is prone to a vulnerability that may let the application be abused as a mail relay. This could be exploited by spammers or other malicious parties.

Simple Form Unauthorized Mail Relay Vulnerability

This issue can be exploited with a Web browser.

Simple Form Unauthorized Mail Relay Vulnerability

Solution:
This issue has been addressed in Simple Form 2.2.


The World Community Network Simple Form 1.0

• The World Community Network Simple Form 2.2
  http://worldcommunity.com/opensource/utilities/s_form.txt

The World Community Network Simple Form 1.1

• The World Community Network Simple Form 2.2
  http://worldcommunity.com/opensource/utilities/s_form.txt

The World Community Network Simple Form 2.0

• The World Community Network Simple Form 2.2
  http://worldcommunity.com/opensource/utilities/s_form.txt

The World Community Network Simple Form 2.1

• The World Community Network Simple Form 2.2
  http://worldcommunity.com/opensource/utilities/s_form.txt

Simple Form Unauthorized Mail Relay Vulnerability

References:

• Simple Form Homepage (The World Community Network)