CVE-2007-4073: Tincan Webbler CMS

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks.

Affected products

• Tincan Webbler CMS: up to and including 3.1.4

Published 2007-07-30. Last modified 2026-06-16.