Crlf injection

2011-12-0211:55:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.5%

JSON

CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter.

CPENameOperatorVersion
prestashopeq1.4.4.1

CPE	Name	Operator	Version
	prestashop	eq	1.4.4.1

References

www.securityfocus.com/bid/50785

www.dognaedis.com/vulns/DGS-SEC-7.html