CVE-2007-3621

Exploit

EPSS 14.8%
Veröffentlicht 09.07.2007 16:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Asteridex ≫ Asteridex Version <= 3.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.8%	0.943

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://bestof.nerdvittles.com/applications/asteridex/

http://osvdb.org/37846

http://secunia.com/advisories/25965

Vendor Advisory

http://securityreason.com/securityalert/2863

http://www.hoku.co.uk/advisories/asteridex.txt

http://www.securityfocus.com/archive/1/472907/100/0/threaded

http://www.securityfocus.com/bid/24781

Patch

Exploit

http://www.vupen.com/english/advisories/2007/2446

https://exchange.xforce.ibmcloud.com/vulnerabilities/35270

https://www.exploit-db.com/exploits/4151

https://nvd.nist.gov/vuln/detail/CVE-2007-3621

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3621

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3621

EUVD