Approved changes feed: RSS · Atom

cpe:2.3:a:squishdot:squishdot:1.4.0:*:*:*:*:*:*:*

part: a version: 1.4.0 update: *

VendorSquishdot (e10ced67-7409-5e31-85f3-34d9f7323d2b)
ProductSquishdot (fd8d07cd-fdba-53ec-a4ef-eb11437ec078)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/squishdot purl2cpe 2026-06-01 10:12:52.527227

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0712 vulnerable 2026-06-08 04:48:55.024317 Details available
mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, which allows remote attackers to bypass spam filters by injecting SMTP headers, probably due to a CRLF injection vulnerability.
Published: 2006-02-15T11:00:00.000Z
Updated: 2024-08-07T16:48:55.223Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.