[Forgot Password]
Login  Register Subscribe

23631

 
 

117687

 
 

98218

 
 

909

 
 

79198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2005-3348

Date: (C)2005-11-17   (M)2017-07-18 


HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.

CVSS Score: 4.3Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE





Reference:
BID-15396
BID-15414
SECUNIA-17441
SECUNIA-17570
SECUNIA-17584
SECUNIA-17616
SECUNIA-17620
SECUNIA-17643
SECUNIA-17698
http://www.securityfocus.com/archive/1/416543
DSA-897
DSA-898
DSA-899
GLSA-200511-18
MDKSA-2005:212
http://www.hardened-php.net/advisory_212005.81.html
phpsysinfo-registerglobal-data-manipulation(23107)

CWE    1
CWE-352

© 2013 SecPod Technologies