CVE-2007-3621

Summary

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.exploit-db.com/exploits/4151
• http://osvdb.org/37846
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35270
• http://securityreason.com/securityalert/2863
• http://www.vupen.com/english/advisories/2007/2446
• http://bestof.nerdvittles.com/applications/asteridex/
• http://www.securityfocus.com/bid/24781
• http://www.securityfocus.com/archive/1/472907/100/0/threaded
• http://www.hoku.co.uk/advisories/asteridex.txt
• http://secunia.com/advisories/25965

References

• https://www.exploit-db.com/exploits/4151
• http://osvdb.org/37846
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35270
• http://securityreason.com/securityalert/2863
• http://www.vupen.com/english/advisories/2007/2446
• http://bestof.nerdvittles.com/applications/asteridex/
• http://www.securityfocus.com/bid/24781
• http://www.securityfocus.com/archive/1/472907/100/0/threaded
• http://www.hoku.co.uk/advisories/asteridex.txt
• http://secunia.com/advisories/25965

• ←Previous
• Next→