CVE-2007-3709 Other in n/a

What is CVE-2007-3709?

CVE-2007-3709 is a medium-severity vulnerability in n/a, published on 11 Jul 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in an unspecified parameter, as demonstrated by a Set-Cookie header.

Which versions are affected by CVE-2007-3709?

It affects 1 product.

Products include Codeigniter Codeigniter.

How do I fix CVE-2007-3709?

No fix has been published for CVE-2007-3709 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-3709 being exploited?

There is no known exploitation of CVE-2007-3709 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2025-54418 CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability Critical 9.8
• CVE-2023-32692 Remote Code Execution Vulnerability in Validation Placeholders Critical 9.8
• CVE-2022-40824 SQL injection in n/a Critical 9.8
• CVE-2022-40825 SQL injection in n/a Critical 9.8
• CVE-2022-40826 SQL injection in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2m5c-p827-r3fx.