VDB
CVE-2007-2509
CVE-2007-2509
PUBLISHED
Reported by mitre · Published May 9, 2007
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| php | php | |
| n/a | n/a | *, n/a, n/a |
Timeline
- May 9, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
- Dec 25, 2023 EPSS Score
- Feb 16, 2024 EPSS Score
References
- 25660 third-party-advisoryx_refsource_SECUNIA
- MDKSA-2007:103 vendor-advisoryx_refsource_MANDRIVA
- 25187 third-party-advisoryx_refsource_SECUNIA
- 25191 third-party-advisoryx_refsource_SECUNIA
- USN-462-1 vendor-advisoryx_refsource_UBUNTU
- ADV-2007-2187 vdb-entryx_refsource_VUPEN
- RHSA-2007:0888 vendor-advisoryx_refsource_REDHAT
- MDKSA-2007:102 vendor-advisoryx_refsource_MANDRIVA
- 26048 third-party-advisoryx_refsource_SECUNIA
- DSA-1296 vendor-advisoryx_refsource_DEBIAN
- RHSA-2007:0355 vendor-advisoryx_refsource_REDHAT
- GLSA-200705-19 vendor-advisoryx_refsource_GENTOO
- 26967 third-party-advisoryx_refsource_SECUNIA
- 27351 third-party-advisoryx_refsource_SECUNIA
- 2007-0017 vendor-advisoryx_refsource_TRUSTIX
- 23818 vdb-entryx_refsource_BID
- 23813 vdb-entryx_refsource_BID
- x_refsource_CONFIRM
- RHSA-2007:0349 vendor-advisoryx_refsource_REDHAT
- DSA-1295 vendor-advisoryx_refsource_DEBIAN
…and 15 more