Legacy email scripts targeted by spammers in honeypot scans

Researchers detected a resurgence in scans targeting vulnerable email CGI scripts on honeypots, similar to CVE-2000-0411 and related flaws. Attackers probe for test scripts like sendmail.php and testemail.php left behind during development, attempting to set arbitrary email headers or achieve code execution. Organizations should remove development test scripts and validate email form implementations.