Lucene search

K
cve[email protected]CVE-2007-3686
HistoryJul 11, 2007 - 5:30 p.m.

CVE-2007-3686

2007-07-1117:30:00
web.nvd.nist.gov
23
cve
2007
3686
crlf
injection
vulnerability
db.php
unobtrusive ajax star rating bar

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.

Affected configurations

NVD
Node
masuga_designunobtrusive_ajax_star_rating_barRange1.1.9

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

Related for CVE-2007-3686