Lucene search
HistoryJul 30, 2007 - 5:30 p.m.
CVE-2007-4073
webbler cms
security vulnerability
email forging
arbitrary email
nvd
cve-2007-4073
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.3%
Webbler CMS before 3.1.6 does not properly restrict use of “mail a friend” forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks.
Affected configurations
Node
tincanwebbler_cmsRange≤3.1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| tincan:webbler_cms | tincan webbler cms | le | 3.1.4 |
Related
prion
prion
Design/Logic Flaw
2007-07-30 17:30:00
cvelist
cvelist
CVE-2007-4073
2007-07-30 17:00:00
nvd
nvd
CVE-2007-4073
2007-07-30 17:30:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2007-4073