7.5
CVSSv2

CVE-2006-1714

Published: 11/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote malicious users to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmyforum phpmyforum 4.0

Exploits

source: wwwsecurityfocuscom/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the conte ...