CVE-2006-4344: Cgi-Rescue Mail F W System

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi.

Affected products

• Cgi-Rescue Mail F W System: version 8.3 only

Published 2006-08-24. Last modified 2026-06-16.