WebApp Sec mailing list archives

attacking PHP mail() function with poorly validated email address string


From: "Serg B." <serg () dodo com au>
Date: Fri, 04 Jun 2004 01:29:17 +1000

Hi All,

I am interested to know if it i possible and if so how to exploit PHP's
mail() function (not including spam) assuming user supplied email
address was not validated. 

   Cheers,
      Serg
-- 
Serg B. <serg () dodo com au>


Current thread: