Lucene search
HistoryJul 10, 2006 - 8:05 p.m.
CVE-2006-3473
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
CRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates sending spam messages, a different issue than CVE-2006-1225.
Affected configurations
Node
drupalform_mail_moduleRange≤1.8.2.1
Related
cve
cve
CVE-2006-3473
2006-07-10 20:05:00
CVE-2006-1225
2006-03-14 19:06:00
cvelist
cvelist
CVE-2006-3473
2006-07-10 20:00:00
CVE-2006-1225
2006-03-14 19:00:00
ubuntucve
ubuntucve
CVE-2006-1225
2006-03-14 00:00:00
nvd
nvd
CVE-2006-1225
2006-03-14 19:06:00
prion
prion
Crlf injection
2006-03-14 19:06:00
nessus
nessus
Debian DSA-1007-1 : drupal - several vulnerabilities
2006-10-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 1007-1 (drupal)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1007-1)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities
2006-03-17 09:42:35
[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities
2006-03-17 09:42:35
osv
osv
drupal - several
2006-03-17 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
Related for NVD:CVE-2006-3473