[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2005-3348

Date: (C)2005-11-17   (M)2017-07-18
 
CVSS Score: 4.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE











HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.

Reference:
BID-15396
BID-15414
SECUNIA-17441
SECUNIA-17570
SECUNIA-17584
SECUNIA-17616
SECUNIA-17620
SECUNIA-17643
SECUNIA-17698
http://www.securityfocus.com/archive/1/416543
DSA-897
DSA-898
DSA-899
GLSA-200511-18
MDKSA-2005:212
http://www.hardened-php.net/advisory_212005.81.html
phpsysinfo-registerglobal-data-manipulation(23107)

CWE    1
CWE-352

© 2013 SecPod Technologies