Email Header Injection
1-minute read
What it is
Email Header Injection happens when attackers manipulate email messages by inserting hidden commands into form fields.
Why it matters
It can be used to send spam, fake emails, or redirect messages without being noticed.
How to reduce risk
- Properly clean all email form inputs
- Block special characters in email fields
- Monitor unusual email sending patterns