NVD

Id
53108  
Name
CVE-2007-0892  
Description
CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-12  
Modified Date
2016-11-21  
Seq
2007-0892  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268561 53108 CVE-2007-0892 20070211 Multiple vulnerabilities in phpMyVisites  View
268562 53108 CVE-2007-0892 20070211 Multiple vulnerabilities in phpMyVisites  View
268563 53108 CVE-2007-0892 phpmyvisites-pagename-response-splitting(32428)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54675 JVNDB-2007-003367 phpMyVisites における CRLF インジェクションの脆弱性 phpMyVisites には、pagename パラメータが "FILE:" で始まっている際、CRLF インジェクションの脆弱性が存在します。 CVE-2007-0892 24247 CVE-2007-0892 53108 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003367.html 2007-02-12 2012-09-25 View