Email Spoofing

How it was found

Hi there,

Similar to this report submitted to Hackerone itself: https://hackerone.com/reports/575

You also are vulnerable to email spoofing.

Steps to reproduce: 1- Go to https://emkei.cz ( A Fake Mailer ) 2- Set the from to parameter as [email protected] or any other name, and send it. 3- The email is sent with any content you'd like to add as the message.

Thanks.