CVE-2007-4190

CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://osvdb.org/38739	Broken Link
http://secunia.com/advisories/26239	Patch Vendor Advisory
http://www.joomla.org/content/view/3677/1/	Vendor Advisory
http://www.vupen.com/english/advisories/2007/2719	Third Party Advisory
http://osvdb.org/38739	Broken Link
http://secunia.com/advisories/26239	Patch Vendor Advisory
http://www.joomla.org/content/view/3677/1/	Vendor Advisory
http://www.vupen.com/english/advisories/2007/2719	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:34

Type	Values Removed	Values Added
References	~~() http://osvdb.org/38739 - Broken Link~~	() http://osvdb.org/38739 - Broken Link
References	~~() http://secunia.com/advisories/26239 - Patch, Vendor Advisory~~	() http://secunia.com/advisories/26239 - Patch, Vendor Advisory
References	~~() http://www.joomla.org/content/view/3677/1/ - Vendor Advisory~~	() http://www.joomla.org/content/view/3677/1/ - Vendor Advisory
References	~~() http://www.vupen.com/english/advisories/2007/2719 - Third Party Advisory~~	() http://www.vupen.com/english/advisories/2007/2719 - Third Party Advisory

Information

Published : 2007-08-08 01:17

Updated : 2024-11-21 00:34

NVD link : CVE-2007-4190

Mitre link : CVE-2007-4190

CVE.ORG link : CVE-2007-4190

JSON object : View

Products Affected

joomla

joomla\!

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

{"id": "CVE-2007-4190", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-08-08T01:17:00.000", "references": [{"url": "http://osvdb.org/38739", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26239", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.joomla.org/content/view/3677/1/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2719", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/38739", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26239", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.joomla.org/content/view/3677/1/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2719", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-74"}]}], "descriptions": [{"lang": "en", "value": "CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de retornos de carro y saltos de l\u00ednea en Joomla! versiones anteriores a 1.0.13 (tambi\u00e9n conocido como Sunglow) permite a atacantes remotos inyectar cabeceras HTML de su elecci\u00f3n y probablemente conducir ataques de particionado de respuesta HTTP mediante secuencias CRLF en el par\u00e1metro url.\r\nNOTA: Esto puede ser aprovechado para realizar ataques de secuencias de comandos en sitios cruzados (XSS).\r\nNOTA: algunos de estos detalles se han obtenido de informaci\u00f3n de terceros."}], "lastModified": "2024-11-21T00:34:59.857", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C3B9154-1305-4AB7-BFE8-FC0803370828", "versionEndExcluding": "1.0.13"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}