CVE-2007-3208

CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative access via requests to (1) register.pl or (2) profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=538
http://www.yabbforum.com/community/?board=general;action=display;num=1181678785
http://www.securityfocus.com/bid/24455	Patch
http://www.securitytracker.com/id?1018236
http://secunia.com/advisories/25656	Patch Vendor Advisory
http://osvdb.org/37237
http://osvdb.org/37236
https://exchange.xforce.ibmcloud.com/vulnerabilities/34848

Configuration 1

cpe:2.3:a:yabb:yabb:2.1:*:*:*:*:*:*:*

---

Published : 2007-06-14 07:30

Updated : 2017-07-29 01:32

---

NVD link : CVE-2007-3208

Mitre link : CVE-2007-3208

No products.

NVD-CWE-Other