Lucene search

K
cve[email protected]CVE-2012-2943
HistoryMay 27, 2012 - 8:55 p.m.

CVE-2012-2943

2012-05-2720:55:05
web.nvd.nist.gov
28
cve-2012-2943
crlf injection
vulnerability
cryptographp
cryptographp.inc.php
http headers
http response splitting
nvd

6.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.6%

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.

Affected configurations

NVD
Node
captchacryptographpMatch-

6.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.6%

Related for CVE-2012-2943