NVD

Id
55361  
Name
CVE-2007-3208  
Description
CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative access via requests to (1) register.pl or (2) profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-14  
Modified Date
2008-11-15  
Seq
2007-3208  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
281339 55361 CVE-2007-3208 20070612 YaBB Forum member.vars CRLF  View
281340 55361 CVE-2007-3208 24455  View
281341 55361 CVE-2007-3208 1018236  View
281342 55361 CVE-2007-3208 http://www.yabbforum.com/community/?board=general;action=display;num=1181678785  View
281343 55361 CVE-2007-3208 yabb-vars-privilege-escalation(34848)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56987 JVNDB-2007-005679 YaBB における CRLF インジェクションの脆弱性 Yet another Bulletin Board (YaBB) には、CRLF インジェクションの脆弱性が存在します。 CVE-2007-3208 26563 CVE-2007-3208 55361 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005679.html 2007-06-14 2012-12-20 View