CVE-2009-1591: Cgi Rescue Cgi Web Mailer

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form.

Affected products

• Cgi Rescue Cgi Web Mailer: up to and including 1.03

Published 2009-05-08. Last modified 2026-06-16.