CVE-2001-1188
Brian Dorricott MAILTO <= 1.0.9 - Unauthenticated SPAM Email Relay via Hidden Form Field Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-1188. PoCs published by http-equiv.
AI-analyzed exploit summary This is a writeup describing a vulnerability in MAILTO that allows an attacker to send emails through a remote host's server by manipulating form inputs. The provided HTML form demonstrates how an attacker could exploit this to send spam or phishing emails appearing to originate from the victim web host.
Description
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.
Exploits (1)
This is a writeup describing a vulnerability in MAILTO that allows an attacker to send emails through a remote host's server by manipulating form inputs. The provided HTML form demonstrates how an attacker could exploit this to send spam or phishing emails appearing to originate from the victim web host.