CVE-2007-1081 in TYPO3
Summary
The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
02/22/2007
Disclosure
02/22/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2959 | TYPO3 Mail Header class.t3lib_formmail.php | Proof-of-Concept | Official fix | CVE-2007-1081 |