Lucene search
+L

4379 matches found

UbuntuCve
UbuntuCve
added 2012/07/20 10:40 a.m.29 views

CVE-2011-4586

CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

5CVSS6AI score0.02102EPSS
SaveExploits0References1
Prion
Prion
added 2012/07/20 10:40 a.m.20 views

Crlf injection

CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

5CVSS7.3AI score0.02102EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2012/07/20 10:00 a.m.37 views

CVE-2011-4586

CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

6.6AI score0.02102EPSS
SaveExploits0References4
CVE
CVE
added 2012/07/20 10:00 a.m.70 views

CVE-2011-4586

CRLF injection vulnerability (HTTP header injection/response splitting) in Moodle Calendar subsystem via calendar/set.php affects Moodle 1.9.x <1.9.15, 2.0.x <2.0.6, and 2.1.x

5CVSS6.8AI score0.02102EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2012/07/18 11:55 p.m.22 views

CVE-2012-0868

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

6.8CVSS6.9AI score0.0257EPSS
SaveExploits1References14
Prion
Prion
added 2012/07/18 11:55 p.m.37 views

Crlf injection

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

6.8CVSS8.4AI score0.0257EPSS
SaveExploits1References14Affected Software1
Cvelist
Cvelist
added 2012/07/18 11:00 p.m.28 views

CVE-2012-0868

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

6.9AI score0.0257EPSS
SaveExploits1References14
CVE
CVE
added 2012/07/18 11:00 p.m.237 views

CVE-2012-0868

CVE-2012-0868 describes a CRLF injection in pg_dump for PostgreSQL. Vulnerable are PostgreSQL branches 8.3.x < 8.3.18, 8.4.x < 8.4.11, 9.0.x < 9.0.7, and 9.1.x

6.8CVSS6.9AI score0.0257EPSS
SaveExploits1References14Affected Software1
seebug.org
seebug.org
added 2012/06/16 12:00 a.m.35 views

Adobe ColdFusion HTTP响应分离漏洞

CVE ID: CVE-2012-2041 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion 8.0至9.0.1版本没有正确过滤某些输入即返回给用户,在实现上存在CRLF注入漏洞,可被利用插入任意HTTP标头,并执行HTTP响应分离攻击。 0 Adobe ColdFusion 9.x Adobe ColdFusion 8.x 厂商补丁: Adobe ----- Adobe已经为此发布了一个安全公告(apsb12-15)以及相应补丁: apsb12-15:Security update: Hotfix available for ColdFusio...

4.3CVSS6.4AI score0.01863EPSS
SaveExploits1
NVD
NVD
added 2012/06/13 4:46 a.m.29 views

CVE-2012-2041

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

4.3CVSS6.8AI score0.01863EPSS
SaveExploits1References1
Prion
Prion
added 2012/06/13 4:46 a.m.27 views

Crlf injection

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

4.3CVSS7.4AI score0.01863EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2012/06/13 1:00 a.m.73 views

CVE-2012-2041

CVE-2012-2041 describes a CRLF injection in the Component Browser of Adobe ColdFusion 8.0–9.0.1 , enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Public references point to Adobe’s APSB12-15 security bulletin, which provided ...

4.3CVSS7AI score0.01863EPSS
SaveExploits1References1Affected Software1
Exploit DB
Exploit DB
added 2012/06/05 12:00 a.m.40 views

pyrocms 2.1.1 - Multiple Vulnerabilities

PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it was built with modularity in mind...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2012/06/05 12:00 a.m.35 views

pyrocms 2.1.1 - Multiple Vulnerabilities

pyrocms 2.1.1 - Multiple Vulnerabilities PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it w...

0.4AI score
SaveExploits0
zdt
zdt
added 2012/06/04 12:00 a.m.38 views

PyroCMS 2.1.1 CRLF Injection / Stored Cross Site Scripting

Exploit for php platform in category web applications PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/06/04 12:00 a.m.31 views

PyroCMS 2.1.1 CRLF Injection / Stored Cross Site Scripting

PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it was built with modularity in mind...

0.3AI score
SaveExploits0
NVD
NVD
added 2012/05/27 8:55 p.m.42 views

CVE-2012-2943

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter...

5CVSS6.3AI score0.01992EPSS
SaveExploits0References3
Prion
Prion
added 2012/05/27 8:55 p.m.22 views

Crlf injection

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter...

5CVSS7.4AI score0.01992EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2012/05/27 8:00 p.m.41 views

CVE-2012-2943

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter...

6.3AI score0.01992EPSS
SaveExploits0References3
CVE
CVE
added 2012/05/27 8:00 p.m.89 views

CVE-2012-2943

CVE-2012-2943 describes a CRLF injection in Cryptographp’s cryptographp.inc.php, exploitable via the cfg parameter to inject arbitrary HTTP headers and enable HTTP response splitting. Connected documents tie this to Monstra CMS 3.0.4 as a related issue (through CVE-2018-16979), but explicit fixes...

5CVSS6.2AI score0.01992EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder