NOCC is a web based email client implemented in PHP4. It includes support for POP3, SMTP and IMAP servers, MIME attachments and multiple languages. A malicious user may construct a URL access a NOCC script such that, while an error is generated, they are able to continue. From this point, the unauthorized user may successfully send outgoing email. The email will not reflect the identity of the unauthorized user.
NOCC is a web based email client implemented in PHP4. It includes support for POP3, SMTP and IMAP servers, MIME attachments and multiple languages. A malicious user may construct a URL access a NOCC script such that, while an error is generated, they are able to continue. From this point, the unauthorized user may successfully send outgoing email. The email will not reflect the identity of the unauthorized user.