| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | CVE-2006-5566 | 27 Oct 200616:00 | – | cvelist |
 | Shop-Script - Multiple HTTP Response Splitting Vulnerabilities | 23 Oct 200600:00 | – | exploitdb |
 | EUVD-2006-5551 | 7 Oct 202500:30 | – | euvd |
 | CVE-2006-5566 | 27 Oct 200616:07 | – | nvd |
 | CVE-2006-5566: Undefined Security Weakness | 27 Oct 200600:00 | – | rapid7 |
Node
| Source | Link |
|---|---|
| securityfocus | www.securityfocus.com/archive/1/449499/100/0/threaded |
| vupen | www.vupen.com/english/advisories/2006/4219 |
| securityreason | www.securityreason.com/securityalert/1791 |
| securityfocus | www.securityfocus.com/bid/20685 |
| secunia | www.secunia.com/advisories/22541 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| links_exchange | query param | /premium/index.php | CRLF injection in the links_exchange parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| news | query param | /premium/index.php | CRLF injection in the news parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| search_with_change_category_ability | query param | /premium/index.php | CRLF injection in the search_with_change_category_ability parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| logging | query param | /premium/index.php | CRLF injection in the logging parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| feedback | query param | /premium/index.php | CRLF injection in the feedback parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| show_price | query param | /premium/index.php | CRLF injection in the show_price parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| register | query param | /premium/index.php | CRLF injection in the register parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| answer | query param | /premium/index.php | CRLF injection in the answer parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| productID | query param | /premium/index.php | CRLF injection in the productID parameter allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
| inside parameters | query param | /premium/index.php | CRLF injection in the 'inside parameters' allows an attacker to inject arbitrary HTTP headers and conduct response splitting attacks. | CWE-20 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 22:31Current
6.1Medium risk
Vulners AI Score6.1
CVSS 25
EPSS0.02251