CVE-2002-0490

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain mail message headers via numerous parameters in write.php.

• http://instantwebmail.sourceforge.net/#changeLog
• http://www.iss.net/security_center/static/8650.phpPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/264041Vendor Advisory
• http://www.securityfocus.com/bid/4361Patch, Vendor Advisory
• http://instantwebmail.sourceforge.net/#changeLog
• http://www.iss.net/security_center/static/8650.phpPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/264041Vendor Advisory
• http://www.securityfocus.com/bid/4361Patch, Vendor Advisory

Published

Aug 12, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0484move_uploaded_file in PHP does not does not check for the ba…
• CVE-2002-0485Norton Anti-Virus (NAV) allows remote attackers to bypass co…7.5
• CVE-2002-0486Intellisol Xpede 4.1 uses weak encryption to store authentic…
• CVE-2002-0487Intellisol Xpede 4.1 stores passwords in plaintext in a Java…
• CVE-2002-0488Linux Directory Penguin traceroute.pl CGI script 1.0 allows …
• CVE-2002-0489Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.…
• CVE-2002-0491admin.php in AlGuest 1.0 guestbook checks for the existence …
• CVE-2002-0492dcshop.cgi in DCShop 1.002 Beta allows remote attackers to d…
• CVE-2002-0493Apache Tomcat may be started without proper security setting…
• CVE-2002-0494Cross-site scripting vulnerability in WebSight Directory Sys…
• CVE-2002-0495csSearch.cgi in csSearch 2.3 and earlier allows remote attac…
• CVE-2002-0496The HTTP server for SouthWest Talker server 1.0.0 allows rem…