CVE-2007-3621

Опубликовано: 09 июл. 2007

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.

Ссылки

http://bestof.nerdvittles.com/applications/asteridex/
http://osvdb.org/37846
http://secunia.com/advisories/25965
Vendor Advisory
http://securityreason.com/securityalert/2863
http://www.hoku.co.uk/advisories/asteridex.txt
http://www.securityfocus.com/archive/1/472907/100/0/threaded
http://www.securityfocus.com/bid/24781
Exploit
Patch
http://www.vupen.com/english/advisories/2007/2446
https://exchange.xforce.ibmcloud.com/vulnerabilities/35270
https://www.exploit-db.com/exploits/4151
http://bestof.nerdvittles.com/applications/asteridex/
http://osvdb.org/37846
http://secunia.com/advisories/25965
Vendor Advisory
http://securityreason.com/securityalert/2863
http://www.hoku.co.uk/advisories/asteridex.txt
http://www.securityfocus.com/archive/1/472907/100/0/threaded
http://www.securityfocus.com/bid/24781
Exploit
Patch
http://www.vupen.com/english/advisories/2007/2446
https://exchange.xforce.ibmcloud.com/vulnerabilities/35270
https://www.exploit-db.com/exploits/4151

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:asteridex:asteridex:*:*:*:*:*:*:*:*

Версия до 3.0 (включая)

EPSS

Процентиль: 94%

0.14796

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4j9f-xx7v-6mmj

github

почти 4 года назад