CVE-2002-2109

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.69%

Published

Dec 31, 2002

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.

Affected Products (10)

matt_wright · formmailvulnerable

· formmail

References (8)

http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html

ExploitPatchVendor Advisory

http://worldwidemart.com/scripts/formmail.shtml

Vendor Advisory

http://www.iss.net/security_center/static/8012.php

http://www.securityfocus.com/bid/3954

http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html

ExploitPatchVendor Advisory

http://worldwidemart.com/scripts/formmail.shtml

KEV Catalog EPSS Scores Vendors All CVEs