Crlf injection

CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL...

CVE-2016-2303

CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL...

CVE-2016-2303

CVE-2016-2303: Ecava IntegraXor before 5.0 build 4522 is vulnerable to CRLF injection in HTTP headers, enabling HTTP response splitting via a crafted URL. Affected product: Ecava IntegraXor HMI web server (pre-5.0 build 4522). Root cause: improper neutralization of CRLF sequences in HTTP header h...

CVE-2016-3166

CRLF injection vulnerability in the drupalsetheader function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP...

CVE-2016-3166

CRLF injection vulnerability in the drupalsetheader function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP...

Crlf injection

CRLF injection vulnerability in the drupalsetheader function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP...

CVE-2016-3166

CRLF injection vulnerability in the drupalsetheader function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP...

CVE-2016-3166

CVE-2016-3166 describes a CRLF injection in Drupal 6.x before 6.38 when used with PHP before 5.1.2, due to the drupal_set_header function. The issue allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting by leveraging a module that outputs user-submitted data...

CVE-2016-3166

Removed by vendor...

CVE-2016-0789

CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Crlf injection

CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2016-0789

CVE-2016-0789 is a CRLF injection vulnerability in the Jenkins CLI command documentation that allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Affected products are Jenkins prior to version 1.650 and LTS prior to 1.642.2. The ro...

CVE-2016-3118

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2016-3118

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

Crlf injection

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2016-3118

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2016-3118

CA API Gateway (formerly Layer7 API Gateway) is affected by a CRLF injection vulnerability identified as CVE-2016-3118. The affected product ranges are CA API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01. The vulnerability allows remote attackers to cause an uns...

Dropbear < 2016.72 CRLF Injection Vulnerability

Dropbear is prone to a carriage return line feed CRLF injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Uber: CRLF Injection in developer.uber.com

The website located at https://developer.uber.com/ suffers from CRLF injection. This allows me to inject JavaScript, HTML as well as arbitrary HTTP Headers. Besides this, I can change the HTTP Response code as well, to display whatever I want in the victim's browser. The vulnerability resides in...

Dropbear SSH CRLF Injection Vulnerability

Dropbear is a relatively small SSH server and client. A CRLF injection vulnerability exists in Dropbear SSH versions prior to 2016.72 that allows remote authenticated users to bypass targeted shell commands by crafting X11 forwarding data...