Lucene search

[email protected]NVD:CVE-2007-2509

HistoryMay 09, 2007 - 12:19 a.m.

CVE-2007-2509

2007-05-0900:19:00

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

7.7

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.

Affected configurations

Nvd

Node

phpphpMatch4.0.0

phpphpMatch4.0.1

phpphpMatch4.0.1patch1

phpphpMatch4.0.1patch2

phpphpMatch4.0.2

phpphpMatch4.0.3

phpphpMatch4.0.3patch1

phpphpMatch4.0.4

phpphpMatch4.0.4patch1

phpphpMatch4.0.5

phpphpMatch4.0.6

phpphpMatch4.0.7

phpphpMatch4.0.7rc1

phpphpMatch4.0.7rc2

phpphpMatch4.0.7rc3

phpphpMatch4.1.0

phpphpMatch4.1.1

phpphpMatch4.1.2

phpphpMatch4.2.0

phpphpMatch4.2.1

phpphpMatch4.2.2

phpphpMatch4.2.3

phpphpMatch4.3.0

phpphpMatch4.3.1

phpphpMatch4.3.2

phpphpMatch4.3.3

phpphpMatch4.3.4

phpphpMatch4.3.5

phpphpMatch4.3.6

phpphpMatch4.3.7

phpphpMatch4.3.8

phpphpMatch4.3.9

phpphpMatch4.3.10

phpphpMatch4.3.11

phpphpMatch4.4.0

phpphpMatch4.4.1

phpphpMatch4.4.2

phpphpMatch4.4.3

phpphpMatch4.4.4

phpphpMatch4.4.5

phpphpMatch4.4.6

phpphpMatch5.0rc1

phpphpMatch5.0rc2

phpphpMatch5.0rc3

phpphpMatch5.0.0

phpphpMatch5.0.1

phpphpMatch5.0.2

phpphpMatch5.0.3

phpphpMatch5.0.4

phpphpMatch5.0.5

phpphpMatch5.1.0

phpphpMatch5.1.1

phpphpMatch5.1.2

phpphpMatch5.1.3

phpphpMatch5.1.4

phpphpMatch5.1.5

phpphpMatch5.1.6

phpphpMatch5.2.0

phpphpMatch5.2.1

VendorProductVersionCPE
phpphp4.0.0cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*
phpphp4.0.1cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*
phpphp4.0.1cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*
phpphp4.0.1cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*
phpphp4.0.2cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*
phpphp4.0.3cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*
phpphp4.0.3cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*
phpphp4.0.4cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*
phpphp4.0.4cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*
phpphp4.0.5cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
php	php	4.0.0	cpe:2.3:a:php:php:4.0.0:::::::*
php	php	4.0.1	cpe:2.3:a:php:php:4.0.1:::::::*
php	php	4.0.1	cpe:2.3:a:php:php:4.0.1:patch1::::::
php	php	4.0.1	cpe:2.3:a:php:php:4.0.1:patch2::::::
php	php	4.0.2	cpe:2.3:a:php:php:4.0.2:::::::*
php	php	4.0.3	cpe:2.3:a:php:php:4.0.3:::::::*
php	php	4.0.3	cpe:2.3:a:php:php:4.0.3:patch1::::::
php	php	4.0.4	cpe:2.3:a:php:php:4.0.4:::::::*
php	php	4.0.4	cpe:2.3:a:php:php:4.0.4:patch1::::::
php	php	4.0.5	cpe:2.3:a:php:php:4.0.5:::::::*