← Database

CVE-2003-1308

MEDIUM CVSS: 4.6 Published: 2003-12-31 Modified: 2026-06-16

Description

CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename.

Affected Platforms

Fvwm Fvwm

Weakness Type

NVD-CWE-Other

References