Email Script

Here's an email script I came across online,

<form action="/contact.php"> <div><label>Email:</label><br /> <input name="email" type="text" /></div> <div><label>Name:</label><br /> <input name="name" type="text" /></div> <div><label>Subject:</label></p> <select name="subject"> <option>Question</option><br /> <option>Question</option><br />

  <option>Question</option><br />
  <option>Question</option><br />

</select> </div> <div><label>Message</label><textarea name="message"></textarea></div> <input type="submit" class="button" value="Send Message" /> </form>

does anyone see any vuln that could be exploited? Be specific so I can try and fix them. like sql injections or whatnot.

Post the source of PHP otherwise we can't search for exploits, also, you might want to start with searching yourself first.

Learning SQL & PHP will give you great insight in the anatomy of a program, and therefore great insight in hackable portions of code.

I see like 5 buffer overflows

a-hack wrote: I see like 5 buffer overflows

Maybe the values of the inputs are being cut in PHP? You don't know that…

i was kidding… lol sorry i fixed my sig

a-hack wrote: i was kidding…

Ah okay :P. Anyway, HOLY SIG?!