CVE-2007-3621

Description

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.

References

https://www.exploit-db.com/exploits/4151

https://exchange.xforce.ibmcloud.com/vulnerabilities/35270

http://www.vupen.com/english/advisories/2007/2446

http://www.securityfocus.com/archive/1/472907/100/0/threaded

http://www.hoku.co.uk/advisories/asteridex.txt

http://securityreason.com/securityalert/2863

http://secunia.com/advisories/25965

http://osvdb.org/37846

http://bestof.nerdvittles.com/applications/asteridex/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS