CVE-2007-3208

Published: Jun 14, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative access via requests to (1) register.pl or (2) profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code.

Affected (1)

Products: Yabb: Yabb

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Yabb Yabb	Version 2.1

References (16)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=538

Source: cve@mitre.org

http://osvdb.org/37236

Source: cve@mitre.org

http://osvdb.org/37237

Source: cve@mitre.org

http://secunia.com/advisories/25656

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/24455

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1018236

Source: cve@mitre.org

http://www.yabbforum.com/community/?board=general%3Baction=display%3Bnum=1181678785

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34848

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=538

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/37236

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/37237

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25656

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/24455

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securitytracker.com/id?1018236

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.yabbforum.com/community/?board=general%3Baction=display%3Bnum=1181678785

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34848

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.