CVE-2007-1898

CVE Database · CVE-2007-1898

CVE-2007-1898

· N/AModified

CVSS v3.1

N/A

EPSS

2.56%

Published

May 16, 2007

Modified

Apr 22, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBJetbox CMS 2.1 Email - 'FormMail.php' Input Validation TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters.

Affected Products (16)

apple · mac_os_x

hp · hp-ux

hp · tru64

linux · linux_kernel

microsoft · windows_2000

microsoft · windows_2003_server

microsoft · windows_95

microsoft · windows_98

microsoft · windows_98se

microsoft · windows_me

microsoft · windows_nt

microsoft · windows_xp

santa_cruz_operation · sco_unix

· solaris

References (16)

http://securityreason.com/securityalert/2710

http://www.netvigilance.com/advisory0026

Vendor Advisory

http://www.osvdb.org/34088

Vendor Advisory

http://www.securityfocus.com/archive/1/468644/100/0/threaded

http://www.securityfocus.com/bid/23989

http://www.securitytracker.com/id?1018063

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1831

https://exchange.xforce.ibmcloud.com/vulnerabilities/34292

http://securityreason.com/securityalert/2710

http://www.netvigilance.com/advisory0026

KEV Catalog EPSS Scores Vendors All CVEs