CVE-2007-2731 in Jetbox CMS

Sumário (Inglês)

CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the subject parameter, a related issue to CVE-2007-1898.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

16/05/2007

Divulgação

16/05/2007

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
36857	Jetbox CMS formmail.php		Alto	Unavailable	CVE-2007-2731

Fontes

• MITRE
• NVD
• CVE Details