Search...

MAXdev MD-Pro modules.php file Variable HTTP Response Splitting

2006-10-25T10:03:48

ID OSVDB:30042
Type osvdb
Reporter OSVDB
Modified 2006-10-25T10:03:48

Description

No description provided by the source

References:

Vendor Specific News/Changelog Entry: http://www.maxdev.com/Article608.phtml Secunia Advisory ID:22564 Related OSVDB ID: 30040 Related OSVDB ID: 30041 FrSIRT Advisory: ADV-2006-4195 CVE-2006-5565 Bugtraq ID: 20754

JSON Vulners Source

Initial Source

{"enchantments": {"score": {"vector": "NONE", "value": 7.5}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-5565"]}, {"type": "osvdb", "idList": ["OSVDB:30041"]}], "modified": "2017-04-28T13:20:26"}, "vulnersScore": 7.5}, "bulletinFamily": "software", "affectedSoftware": [], "references": [], "href": "https://vulners.com/osvdb/OSVDB:30042", "id": "OSVDB:30042", "title": "MAXdev MD-Pro modules.php file Variable HTTP Response Splitting", "history": [], "type": "osvdb", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "lastseen": "2017-04-28T13:20:26", "edition": 1, "hash": "3f3b61742a0fa6e458042574a9325ebb7fb97767765fac3a1545f606de0cf331", "objectVersion": "1.2", "reporter": "OSVDB", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://www.maxdev.com/Article608.phtml\n[Secunia Advisory ID:22564](https://secuniaresearch.flexerasoftware.com/advisories/22564/)\n[Related OSVDB ID: 30040](https://vulners.com/osvdb/OSVDB:30040)\n[Related OSVDB ID: 30041](https://vulners.com/osvdb/OSVDB:30041)\nFrSIRT Advisory: ADV-2006-4195\n[CVE-2006-5565](https://vulners.com/cve/CVE-2006-5565)\nBugtraq ID: 20754\n", "modified": "2006-10-25T10:03:48", "viewCount": 0, "published": "2006-10-25T10:03:48", "cvelist": ["CVE-2006-5565"], "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "b7520417bf681371de34e134e229f23a"}, {"key": "cvss", "hash": "26769fd423968d45be7383413e2552f1"}, {"key": "description", "hash": "d3bfdf2b970fc266322e9b2d74151746"}, {"key": "href", "hash": "6255c6fcd8a0dacdc5221563a65fb11f"}, {"key": "modified", "hash": "ead03811f3c3cc3a43c8ea9a56df7683"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "ead03811f3c3cc3a43c8ea9a56df7683"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "955b328dc7cd615c13af5464c9183464"}, {"key": "title", "hash": "0b349fae9dfab2601565d7c1fcafff82"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}]}

{"cve": [{"lastseen": "2016-09-03T07:46:13", "bulletinFamily": "NVD", "description": "CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4) func parameters in (a) index.php; and the (5) file parameter in (b) modules.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.", "modified": "2011-03-07T21:43:26", "published": "2006-10-27T12:07:00", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-5565", "id": "CVE-2006-5565", "title": "CVE-2006-5565", "type": "cve", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}}], "osvdb": [{"lastseen": "2017-04-28T13:20:26", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://www.maxdev.com/Article608.phtml\n[Secunia Advisory ID:22564](https://secuniaresearch.flexerasoftware.com/advisories/22564/)\n[Related OSVDB ID: 30040](https://vulners.com/osvdb/OSVDB:30040)\n[Related OSVDB ID: 30042](https://vulners.com/osvdb/OSVDB:30042)\nFrSIRT Advisory: ADV-2006-4195\n[CVE-2006-5565](https://vulners.com/cve/CVE-2006-5565)\nBugtraq ID: 20754\n", "modified": "2006-10-25T10:03:48", "published": "2006-10-25T10:03:48", "href": "https://vulners.com/osvdb/OSVDB:30041", "id": "OSVDB:30041", "title": "MAXdev MD-Pro index.php Multiple Variable HTTP Response Splitting", "type": "osvdb", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}}]}