CVE

Id
26088  
CVE No.
CVE-2007-2731  
Status
Candidate  
Description
CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the subject parameter, a related issue to CVE-2007-1898.  
Phase
Assigned (20070516)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262434 26088 CVE-2007-2731 BUGTRAQ:20070515 Jetbox CMS version 2.1 E-Mail Injection Vulnerability  View
262435 26088 CVE-2007-2731 URL:http://www.securityfocus.com/archive/1/archive/1/468644/100/0/threaded  View
262436 26088 CVE-2007-2731 MISC:http://www.netvigilance.com/advisory0026  View
262437 26088 CVE-2007-2731 BID:23989  View
262438 26088 CVE-2007-2731 URL:http://www.securityfocus.com/bid/23989  View
262439 26088 CVE-2007-2731 VUPEN:ADV-2007-1831  View
262440 26088 CVE-2007-2731 URL:http://www.vupen.com/english/advisories/2007/1831  View
262441 26088 CVE-2007-2731 OSVDB:34088  View
262442 26088 CVE-2007-2731 URL:http://www.osvdb.org/34088  View
262443 26088 CVE-2007-2731 SECTRACK:1018063  View
262444 26088 CVE-2007-2731 URL:http://www.securitytracker.com/id?1018063  View
262445 26088 CVE-2007-2731 SREASON:2710  View
262446 26088 CVE-2007-2731 URL:http://securityreason.com/securityalert/2710  View
262447 26088 CVE-2007-2731 XF:jetbox-formmail-mail-relay(34292)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55178 JVNDB-2007-003870 Jetbox CMS における任意のスクリプトをアップロードされる脆弱性 Jetbox CMS には、無制限にファイルアップロードされることにより、任意のスクリプトをアップロードされる脆弱性が存在します。 CVE-2007-2733 26088 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003870.html  View