Skip to content

Instantly share code, notes, and snippets.

@brad-anton
Created August 2, 2016 11:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save brad-anton/f3311d60bffff4a4bfec0533d6f6283e to your computer and use it in GitHub Desktop.
Save brad-anton/f3311d60bffff4a4bfec0533d6f6283e to your computer and use it in GitHub Desktop.
Simplified version of web-to-email vulnerability Raw
$DestinationAddress = "contact@website.com";
$Subject = "Contact Form Inquiry";
while(list($key, $val) = each($_POST)) {
$GLOBALS[$key] = $val;
}
$Header = "From: $name <$email>\r\n";
$Header .= "Reply-To: $name <$email>\r\n";
mail($DestinationAddress, $Subject, $Message, $Header);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment