CRLF injection vulnerability in the User Profile: Send Email feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Geeklog | Geeklog | 1.3.5_sr1 (including) | 1.3.5_sr1 (including) |
| Geeklog | Geeklog | 1.35 (including) | 1.35 (including) |