CVE-2007-4190

CRLF injection vulnerability in Joomla!

published August 8, 2007

CVSS
—
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01673 · 76.5th percentile
Published
2007-08-08T01:11Z
EPSS history
Timeline
  • 08 AUG 01:11Z
    CRLF injection vulnerability in Joomla!
    cvelistv5