CVE-2007-0892

Опубликовано: 12 фев. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".

Ссылки

http://marc.info/?l=full-disclosure&m=117121596803908&w=2
Third Party Advisory
http://osvdb.org/33177
Broken Link
http://www.securityfocus.com/archive/1/459792/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/32428
http://marc.info/?l=full-disclosure&m=117121596803908&w=2
Third Party Advisory
http://osvdb.org/33177
Broken Link
http://www.securityfocus.com/archive/1/459792/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/32428

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:matthieu_aubry:phpmyvisites:*:*:*:*:*:*:*:*

Версия до 2.1 (включая)

cpe:2.3:a:matthieu_aubry:phpmyvisites:0.1_beta:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.0:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.1:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2_beta:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00619

Низкий

7.5 High

CVSS2

Дефекты

CWE-93

Связанные уязвимости

GHSA-29qc-hqrg-8mpw

github

больше 3 лет назад