Lucene search
HistoryMay 16, 2007 - 10:30 p.m.
CVE-2007-1898
cve
2007
1898
formmail.php
jetbox cms
security
vulnerability
email spam
nvd
6.9 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.049 Low
EPSS
Percentile
92.7%
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetbox:jetbox_cms | jetbox jetbox cms | eq | 2.1 |
References
Related
prion
prion
Code injection
2007-05-16 22:30:00
Crlf injection
2007-05-16 22:30:00
securityvulns
securityvulns
Jetbox CMS version 2.1 E-Mail Injection Vulnerability
2007-05-17 00:00:00
packetstorm
packetstorm
jetbox-inject.txt
2007-05-17 00:00:00
cve
cve
CVE-2007-2731
2007-05-16 22:30:00
6.9 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.049 Low
EPSS
Percentile
92.7%
Related for CVE-2007-1898