5.1

CVE-2007-2618

EPSS 1.19%
Veröffentlicht 11.05.2007 16:19:00
Zuletzt bearbeitet 16.06.2026 22:39:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the lang parameter. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Drake Team ≫ Drake Cms Version0.4.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.19%	0.639

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://osvdb.org/37303

http://securityreason.com/securityalert/2691

http://www.securityfocus.com/archive/1/467829/100/0/threaded

http://www.securityfocus.com/bid/23851

https://exchange.xforce.ibmcloud.com/vulnerabilities/34145

https://nvd.nist.gov/vuln/detail/CVE-2007-2618

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2618

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2618

EUVD