← Back

CVE-2007-0892

nvd nist
Published: Feb 12, 2007Modified: Apr 23, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".

Affected (9)

Matthieu Aubry
1 product
Phpmyvisites
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Matthieu Aubry
Phpmyvisites
Up to 2.1
Phpmyvisites
Version 0.1_beta
Phpmyvisites
Version 1.0
Phpmyvisites
Version 1.1
Phpmyvisites
Version 1.2.1
Phpmyvisites
Version 1.2.2
Phpmyvisites
Version 1.2
Phpmyvisites
Version 1.2_beta
Phpmyvisites
Version 1.3

Related CWEs

CWE-93
Improper Neutralization of CRLF Sequences ('CRLF Injection')
The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

References (8)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.