The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities allowed setting the "To" address and were heavily abused by spammers.
Summary from US-CERT / SANS Internet Storm Center.
Explained
The technology and terms in this story. Learn more
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.