CVE-2014-9182 in CMSinfo

Summary

models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host: header.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

12/02/2014

Disclosure

12/02/2014

Entries

1

CPE

ready

CWE

CWE-79

CVSS

4.3

EPSS

0.00245

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-9182
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-9182
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-9182/

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!