Description
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
Remediation
References
Related Vulnerabilities
Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-26072)
WordPress Plugin WordPress Popular Posts Multiple Vulnerabilities (5.3.2)
WordPress Plugin Easy PayPal Events Cross-Site Scripting (1.1.1)
WordPress Plugin Kadence WooCommerce Email Designer PHP Object Injection (1.5.6)