Email Header Injection
Variants:
Direct Persistent Session
Vector Type:
Attack
Relevance:
Generic
Layer:
Application-Level
Platforms:
Any
Target Type:
Application
Affected Mechanisms:
Input Validation, Syntax Escaping
Invented In:
15/02/2006
Added In:
08/12/2014
Quick Introduction to the Topic:
Vector Operation Method:
Malicious inputs can affect the structure of email messages generated in the server - limited to affecting the email headers due to bounds or other restrictions
