Crlf injection

CRLF injection vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 before 7.0.0.8 Cumulative iFix 2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL...

CVE-2015-0196

CVE-2015-0196 affects IBM WebSphere Commerce 6.0–6.0.0.11 and 7.0 before 7.0.0.8. It is a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via a crafted URL. Identified impact is partial integrity exposure (headers) wit...

CVE-2015-0196

CRLF injection vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 before 7.0.0.8 Cumulative iFix 2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL...

[SECURITY] [DLA 251-2] zendframework regression update

Package : zendframework Version : 1.10.6-1squeeze4 CVE ID : CVE-2012-6531 CVE-2012-6532 CVE-2014-2681 CVE-2014-2682 CVE-2014-2683 CVE-2014-2684 CVE-2014-2685 CVE-2014-4914 CVE-2014-8088 CVE-2014-8089 CVE-2015-3154 Debian Bug : 743175 754201 The previous zendframework upload incorrectly fixes...

IBM WebSphere Commerce CRLF Injection Vulnerability

IBM WebSphere Commerce is a suite of e-business solutions from IBM in the United States. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. A CRLF injection vulnerability exists in IBM WebSphere Commerce versions 6.0 through...

Debian DLA-251-2 : zendframework regression update

The previous zendframework upload incorrectly fixes CVE-2015-3154, causing a regression. This update corrects this problem. Thanks to Evgeny Smolin . CVE-2012-6531 Pdraic Brady identified a weakness to handle the SimpleXMLElement zendframework class, allowing to remote attackers to read arbitrary...

[SECURITY] [DLA 251-1] zendframework security update

Package : zendframework Version : 1.10.6-1squeeze3 CVE ID : CVE-2012-6531 CVE-2012-6532 CVE-2014-2681 CVE-2014-2682 CVE-2014-2683 CVE-2014-2684 CVE-2014-2685 CVE-2014-4914 CVE-2014-8088 CVE-2014-8089 CVE-2015-3154 Debian Bug : 743175 754201 Several vulnerabilities were found in the Zend PHP...

Mail.ru: [my.mail.ru] CRLF Injection

Сценарий перенаправления с /folder/ на /folder уязвим к атаке типа CRLF Injection. PoC Установка cookie crlf=inj на .mail.ru Подвержены все браузеры, кроме FireFox http://my.mail.ru/crlftest%0dSet-Cookie:crlf=inj6;domain=.mail.ru;path=/;/...

MGASA-2015-0241 Updated php-ZendFramework packages fix security vulnerabilities

Updated php-ZendFramework packages fix security vulnerability: Filippo Tessarotto and Maks3w reported potential CRLF injection attacks in mail and HTTP headers in ZendFramework before 1.2.12 CVE-2015-3154...

Updated php-ZendFramework packages fix security vulnerabilities

Updated php-ZendFramework packages fix security vulnerability: Filippo Tessarotto and Maks3w reported potential CRLF injection attacks in mail and HTTP headers in ZendFramework before 1.2.12 CVE-2015-3154...

CVE-2015-0770

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341...

Crlf injection

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341...

CVE-2015-0770

The vulnerability CVE-2015-0770 affects Cisco TelePresence TC software on the SX20 Integrator C platform, specifically TC 6.x before 6.3.4 and 7.x before 7.3.3. The root cause is improper handling of HTTP requests leading toCRLF injection and HTTP response splitting, allowing an unauthenticated, ...

CVE-2015-0770

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341...

Yelp: [engineeringblog.yelp.com] CRLF Injection

CRLF Injection via Request-URI PoC: https://engineeringblog.yelp.com/xxcrlftest%0d%0aSet-Cookie:%20test=test;domain=.yelp.com HTTP Response: HTTP/1.1 301 Moved Permanently ... Location: http://engineeringblog.yelp.com/xxcrlftest Set-Cookie: test=test;domain=.yelp.com Result: Creating a cookie-par...

Shopify: [www.*.myshopify.com] CRLF Injection

CRLF Injection via Request-URI PoC: http://www.myshopify.com/xxcrlftest%0aSet-Cookie:test=test3;domain=.myshopify.com; https://www.blackfan.myshopify.com/xxx%0aSet-Cookie:test=test2;domain=.myshopify.com; HTTP Response: HTTP/1.1 302 Moved Temporarily ... Location: http://myshopify.com/xxcrlftest...

Mail.ru: [s.mail.ru] CRLF Injection

Сценарий перенаправления с https://s.mail.ru/ на https://cloud.mail.ru/ уязвим к атаки типа CRLF Injection. PoC Установка cookie crlf=injection на .mail.ru Подвержены все браузеры, кроме FireFox https://s.mail.ru/test%0dSet-Cookie:crlf=injection;domain=.mail.ru; Может быть использовано в комбинац...

Maian Gallery 2.0 SQL Injection / Header Injection

| Title : Maian Gallery v2.0 Mulllti Vulnerability | Author : indoushka | email : [email protected] | Dork : Maian Gallery v2.0. Copyright © 2006-2015 Maian Script World. All Rights Reserved | Tested on: Win 8.1 fr pro / 21:58 15/05/2015 | Bug : Mulllti | Download :...

Fedora 22 : php-ZendFramework-1.12.13-1.fc22 (2015-8704)

Zend Framework 1.12.13 - 567: Cast int and float to string when creating headers Zend Framework 1.12.12 - 493: PHPUnit not being installed - 511: Add PATCH to the list of allowed methods in ZendControllerRequestHttpTestCase - 513: Save time and space when cloning PHPUnit - 515: !IE conditional...

Fedora 20 : php-ZendFramework-1.12.13-1.fc20 (2015-8714)

Zend Framework 1.12.13 - 567: Cast int and float to string when creating headers Zend Framework 1.12.12 - 493: PHPUnit not being installed - 511: Add PATCH to the list of allowed methods in ZendControllerRequestHttpTestCase - 513: Save time and space when cloning PHPUnit - 515: !IE conditional...