PT-2011-4980

Name of the Vulnerable Software and Affected Versions Prestashop version 1.4.4.1 Description A CRLF injection issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter in the admin/displayImage.php file. Recommendations For...

CVE-2011-4545: Improper Control of Generation of Code

CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter...