Lucene search
HistoryMay 16, 2007 - 10:30 p.m.
CVE-2007-1898
cve
2007
1898
formmail.php
jetbox cms
security
vulnerability
email spam
nvd
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.044 Low
EPSS
Percentile
92.4%
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters.
Affected configurations
Node
applemac_os_x
ORhphp-ux
ORhptru64
ORlinuxlinux_kernel
ORmicrosoftwindows_2000
ORmicrosoftwindows_2003_server
ORmicrosoftwindows_95
ORmicrosoftwindows_98gold
ORmicrosoftwindows_98se
ORmicrosoftwindows_me
ORmicrosoftwindows_ntMatch4.0
ORmicrosoftwindows_xp
ORsanta_cruz_operationsco_unix
ORsunsolaris
ORwindriverbsdos
jetboxjetbox_cmsMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetbox:jetbox_cms | jetbox jetbox cms | eq | 2.1 |
References
Related
packetstorm
packetstorm
jetbox-inject.txt
2007-05-17 00:00:00
prion
prion
Code injection
2007-05-16 22:30:00
Crlf injection
2007-05-16 22:30:00
cvelist
cvelist
CVE-2007-1898
2007-05-16 22:00:00
CVE-2007-2731
2007-05-16 22:00:00
securityvulns
securityvulns
Jetbox CMS version 2.1 E-Mail Injection Vulnerability
2007-05-17 00:00:00
nvd
nvd
CVE-2007-1898
2007-05-16 22:30:00
CVE-2007-2731
2007-05-16 22:30:00
cve
cve
CVE-2007-2731
2007-05-16 22:30:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.044 Low
EPSS
Percentile
92.4%
Related for CVE-2007-1898