CVE-2006-7020

CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and…

published February 15, 2007

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01466 · 73.5th percentile
Published
2007-02-15T02:00Z
EPSS history
Timeline
  • 15 FEB 02:00Z
    CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and…
    cvelistv5