CVE-2007-3208

N/A Unknown
Published: June 14, 2007 Modified: April 23, 2026
View on NVD

Description

CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative access via requests to (1) register.pl or (2) profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=538
Source: cve@mitre.org
http://osvdb.org/37236
Source: cve@mitre.org
http://osvdb.org/37237
Source: cve@mitre.org
http://secunia.com/advisories/25656
Source: cve@mitre.org
Patch Vendor Advisory
http://www.securityfocus.com/bid/24455
Source: cve@mitre.org
Patch
http://www.securitytracker.com/id?1018236
Source: cve@mitre.org
http://www.yabbforum.com/community/?board=general%3Baction=display%3Bnum=1181678785
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/34848
Source: cve@mitre.org
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=538
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/37236
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/37237
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/25656
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.securityfocus.com/bid/24455
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.securitytracker.com/id?1018236
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.yabbforum.com/community/?board=general%3Baction=display%3Bnum=1181678785
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/34848
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
17.7%
95th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

yabb