NuytsTech Security

CVE-2007-2731

by ·

CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the subject parameter, a related issue to CVE-2007-1898.

Date published : 2007-05-16

http://www.securityfocus.com/bid/23989

http://www.securityfocus.com/archive/1/468644/100/0/threaded

Tags: