CVE-2007-4385
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using...
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
Exploit likelihood
What each source reports
NVD Score used
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
- Record
CVE-2007-4385- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
- Record
CVE-2007-4385- Updated
- 2026-11-02
EUVDEUVD-2007-4368 No score
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
- Record
EUVD-2007-4368- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fp6x-72cw-rg73 No score
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using...
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
- Record
GHSA-fp6x-72cw-rg73- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | OWASP Stinger - Filter Bypass | 2007-08-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4385 is a medium vulnerability (CVSS 6.8) in Owasp Stinger, published August 17, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.08%, the 87th percentile. No source names a fixed version.