Lucene search
K

CVE-2014-2017

🗓️ 18 Jan 2018 14:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
OXID eShop < 4.7.11/5.0.11 + < 4.8.4/5.1.4 - Multiple Vulnerabilities
21 Mar 201400:00
zdt
ATTACKERKB
CVE-2014-2017
18 Jan 201814:29
attackerkb
Cvelist
CVE-2014-2017
18 Jan 201814:00
cvelist
Exploit DB
OXID eShop &lt; 4.7.11/5.0.11 / &lt; 4.8.4/5.1.4 - Multiple Vulnerabilities
20 Mar 201400:00
exploitdb
EUVD
EUVD-2014-2069
7 Oct 202500:30
euvd
exploitpack
OXID eShop 4.7.115.0.11 4.8.45.1.4 - Multiple Vulnerabilities
20 Mar 201400:00
exploitpack
NVD
CVE-2014-2017
18 Jan 201814:29
nvd
Packet Storm
OXID eShop XSS / CRLF Injection
20 Mar 201400:00
packetstorm
Prion
Crlf injection
18 Jan 201814:29
prion
seebug.org
OXID eShop 'index.php'多个HTTP应答拆分漏洞
25 Mar 201400:00
seebug
Rows per page
NVD
Node
oxidforgeeshopRange<4.7.11professional
OR
oxidforgeeshopRange4.8.04.8.4professional
Node
oxidforgeeshopRange<5.0.11enterprise
OR
oxidforgeeshopRange5.1.05.1.4enterprise
Node
oxidforgeeshopRange<4.7.11community
OR
oxidforgeeshopRange4.8.04.8.4community
ParameterPositionPathDescriptionCWE
anidrequest bodyindex.phpCRLF injection / HTTP response splitting via anid parameterCWE-93
cnidrequest bodyindex.phpCRLF injection / HTTP response splitting via cnid parameterCWE-93
listtyperequest bodyindex.phpCRLF injection / HTTP response splitting via listtype parameterCWE-93
searchtagquery paramtag/sample/sample-name.htmlXSS vulnerability via crafted searchtag parameter in URICWE-93

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:05Current
6.1Medium risk
Vulners AI Score6.1
CVSS 25.8
CVSS 36.1
EPSS0.02449
40