CVE-2007-1898 : formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails

formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters.

Published 2007-05-16 22:30:00

Updated 2018-10-16 16:41:11

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-1898

Jetbox » Jetbox Cms » Version: 2.1
cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: HP » Hp-ux
When used together with: HP » Tru64
When used together with: Linux » Linux Kernel
When used together with: Microsoft » Windows 2000
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows 95
When used together with: Microsoft » Windows 98 » Update Gold
When used together with: Microsoft » Windows 98se
When used together with: Microsoft » Windows Me
When used together with: Microsoft » Windows Nt » Version: 4.0
When used together with: Microsoft » Windows Xp
When used together with: Santa Cruz Operation » Sco Unix
When used together with: SUN » Solaris
When used together with: Windriver » Bsdos

Exploit prediction scoring system (EPSS) score for CVE-2007-1898

EPSS FAQ

3.18%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 91 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-1898

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:N	8.6	4.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

References for CVE-2007-1898

Jump to

Vulnerability Details : CVE-2007-1898

Products affected by CVE-2007-1898

Exploit prediction scoring system (EPSS) score for CVE-2007-1898

CVSS scores for CVE-2007-1898

References for CVE-2007-1898