NX5Linkx 1.0 - links.php HTTP Response Splitting

Type exploitpack
Reporter Aliaksandr Hartsuyeu
Modified 2006-09-13T00:00:00


NX5Linkx 1.0 - links.php HTTP Response Splitting

                                            source: https://www.securityfocus.com/bid/20011/info

NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

http://www.example.com% 0D%0A%0D%0AHTTP/1.0 200 OK%0D%0A%0D% 0A.......