Lucene search
HistoryFeb 22, 2007 - 11:28 p.m.
CVE-2007-1081
cve-2007-1081
typo3
email injection
class.t3lib_formmail.php
security vulnerability
6.5 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%
The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| typo3:typo3 | typo3 | le | 4.0.4 |
| typo3:typo3 | typo3 | le | 4.1 |
Related
openvas
openvas
FreeBSD Ports: typo3
2008-09-04 00:00:00
TYPO3 Mail Header Injection Vulnerability
2013-12-23 00:00:00
FreeBSD Ports: typo3
2008-09-04 00:00:00
freebsd
freebsd
typo3 -- email header injection
2007-02-21 00:00:00
cvelist
cvelist
CVE-2007-1081
2007-02-22 23:00:00
ubuntucve
ubuntucve
CVE-2007-1081
2007-02-22 00:00:00
prion
prion
Information disclosure
2007-02-22 23:28:00
nessus
nessus
securityvulns
securityvulns
6.5 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2007-1081