VULNERABILITY INTELLIGENCE
CVE-2007-4073
CVSS score5 MEDIUM
EPSS probability1.22%
CISA KEVNot currently listed
Published2007-07-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks.