CVE-2020-25901
Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.
Date published : 2020-12-18
http://packetstormsecurity.com/files/160631/Spiceworks-7.5-HTTP-Header-Injection.html