CVE-2007-2731: Jetbox CMS

Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days.

CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the subject parameter, a related issue to CVE-2007-1898.

Affected products

• Jetbox Jetbox CMS: version 2.1 only

Published 2007-05-16. Last modified 2026-06-16.