← back
CVE-2005-3982

CVE-2005-3982

EPSS 7.1%
CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/26691unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/17848http://secunia.com/advisories/19240http://vd.lwang.org/webcalendar_multiple_vulns.txthttp://www.debian.org/security/2006/dsa-1002http://www.osvdb.org/21383http://www.securityfocus.com/archive/1/418286/100/0/threadedhttp://www.securityfocus.com/bid/15673http://www.vupen.com/english/advisories/2005/2702