CVE-2004-2512

EPSS 4.6%

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/24665unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html http://secunia.com/advisories/12751 http://securitytracker.com/id?1011481 https://exchange.xforce.ibmcloud.com/vulnerabilities/17640 http://www.osvdb.org/10591 http://www.securityfocus.com/bid/11340