NX5Linkx 1.0 - links.php HTTP Response Splitting

2006-09-13T00:00:00
ID EXPLOITPACK:1A556D59C6FD0D758FFFD9CB6BAC9684
Type exploitpack
Reporter Aliaksandr Hartsuyeu
Modified 2006-09-13T00:00:00

Description

NX5Linkx 1.0 - links.php HTTP Response Splitting

                                        
                                            source: https://www.securityfocus.com/bid/20011/info

NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

http://www.example.com% 0D%0A%0D%0AHTTP/1.0 200 OK%0D%0A%0D% 0A.......