← back
CVE-2007-2509

CVE-2007-2509

EPSS 2.1%
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.htmlhttp://rhn.redhat.com/errata/RHSA-2007-0889.htmlhttp://secunia.com/advisories/25187http://secunia.com/advisories/25191http://secunia.com/advisories/25255http://secunia.com/advisories/25318http://secunia.com/advisories/25365http://secunia.com/advisories/25372http://secunia.com/advisories/25445http://secunia.com/advisories/25660http://secunia.com/advisories/26048http://secunia.com/advisories/26967