CVE-2007-1081 in TYPO3
Résumé (Anglaise)
The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Réserver
22/02/2007
Divulgation
22/02/2007
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 2959 | TYPO3 Mail Header class.t3lib_formmail.php | Preuve de concept | Correctif officiel | CVE-2007-1081 |