← Database

CVE-2007-2731

MEDIUM CVSS: 4.0 Published: 2007-05-16 Modified: 2026-06-16

Description

CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the subject parameter, a related issue to CVE-2007-1898.

Affected Platforms

Jetbox Jetbox Cms

Weakness Type

NVD-CWE-Other

References