CVE-2006-1225

Опубликовано: 14 мар. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01075

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-1225

ubuntu

больше 19 лет назад

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.

CVE-2006-1225

debian

больше 19 лет назад

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x be ...

GHSA-ffxc-f678-c54f

github

около 3 лет назад

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.

EPSS

Процентиль: 77%

0.01075

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other