CVE-2007-3621

Published: Jul 9, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.

Affected (1)

Products: Asteridex: Asteridex

Asteridex

1 product

Asteridex

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Asteridex Asteridex	version ≤ 3.0

References (20)

http://bestof.nerdvittles.com/applications/asteridex/

Source: cve@mitre.org

http://osvdb.org/37846

Source: cve@mitre.org

http://secunia.com/advisories/25965

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2863

Source: cve@mitre.org

http://www.hoku.co.uk/advisories/asteridex.txt

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/472907/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24781

Source: cve@mitre.org

ExploitPatch

http://www.vupen.com/english/advisories/2007/2446

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35270

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4151

Source: cve@mitre.org

http://bestof.nerdvittles.com/applications/asteridex/