exploitDog

CVE-2005-4712

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

Ссылки

http://www.zone-h.org/advisories/read/id=8360
Exploit
Vendor Advisory
http://www.zone-h.org/advisories/read/id=8360
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:php_handicapper:php_handicapper:*:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00397

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-65mh-gj85-793w

github

почти 4 года назад

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

EPSS

Процентиль: 60%

0.00397

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other