CVE-2002-1771: Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting...

Security readout for executives and security teams

This CVE describes an old FormMail flaw that can let outsiders abuse a website’s contact form to send spam or anonymous email. The main business risk is mail-server reputation damage, spam complaints, and misuse of a trusted domain, not direct system takeover based on the provided sources. Exposure is likely limited to legacy public CGI deployments of Matt Wright FormMail 1.9 or earlier. Modern sites without this script are not affected based on the provided evidence. Prioritize if any public-facing legacy CGI mail form exists. The issue can damage sender reputation and enable abuse of company infrastructure, but provided sources do not indicate code execution or active exploitation. Mitigation focus: Inventory public CGI form handlers for Matt Wright FormMail.; Remove or disable FormMail 1.9 and earlier where found.; Check Script Archive or vendor guidance for supported replacement advice..

Prepared

Jun 29, 2026, 19:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.