CVE-2005-4712

2006-02-1111:00:00

mitre

www.cve.org

crlf injection

php handicapper

process_signup.php

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

References

www.zone-h.org/advisories/read/id=8360