VULNERABILITY INTELLIGENCE
CVE-2006-3473
CVSS score7.5 HIGH
EPSS probability1.55%
CISA KEVNot currently listed
Published2006-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
CRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates sending spam messages, a different issue than CVE-2006-1225.