Vulnerability Details CVE-2007-0892
CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=full-disclosure&m=117121596803908&w=2
- http://osvdb.org/33177
- http://www.securityfocus.com/archive/1/459792/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32428
- http://marc.info/?l=full-disclosure&m=117121596803908&w=2
- http://osvdb.org/33177
- http://www.securityfocus.com/archive/1/459792/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32428
Products affected by CVE-2007-0892
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:*
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:0.1_beta
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.0
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.1
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.1
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.2
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2_beta
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.3