CVE-2007-3621

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.

Link	Resource
http://www.hoku.co.uk/advisories/asteridex.txt
http://www.securityfocus.com/bid/24781	Exploit Patch
http://secunia.com/advisories/25965	Vendor Advisory
http://bestof.nerdvittles.com/applications/asteridex/
http://securityreason.com/securityalert/2863
http://www.vupen.com/english/advisories/2007/2446
http://osvdb.org/37846
https://exchange.xforce.ibmcloud.com/vulnerabilities/35270
https://www.exploit-db.com/exploits/4151
http://www.securityfocus.com/archive/1/472907/100/0/threaded

Configuration 1

cpe:2.3:a:asteridex:asteridex:*:*:*:*:*:*:*:*

---

Published : 2007-07-09 04:30

Updated : 2018-10-15 09:29

---

NVD link : CVE-2007-3621

Mitre link : CVE-2007-3621

No products.

NVD-CWE-Other