CVE-2007-2731 in Jetbox CMS
Summary
CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the subject parameter, a related issue to CVE-2007-1898.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/16/2007
Disclosure
05/16/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 36857 | Jetbox CMS formmail.php | High | Unavailable | CVE-2007-2731 |