← back
CVE-2007-4385

CVE-2007-4385

EPSS 3.1%
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/30491unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://o0o.nu/~meder/o0o_bypassing_servlet_input_validation_filters.txthttp://osvdb.org/39544http://secunia.com/advisories/26441http://securityreason.com/securityalert/3035https://exchange.xforce.ibmcloud.com/vulnerabilities/35981http://www.securityfocus.com/archive/1/476288/100/0/threadedhttp://www.securityfocus.com/bid/25294http://www.securitytracker.com/id?1018555