I see a lot of company mail servers misconfigured to allow authenticated users send mail as anyone. So while the SQL part makes no sense to me, sending mails fo

I see a lot of company mail servers misconfigured to allow authenticated users send mail as anyone. So while the SQL part makes no sense to me, sending mails for another account seems rather widespread whereever I .. tested. And then there's of course the ability to just send from your account and change only the FROM header.