CVE-2005-3883: Undefined Security Weakness

CRLF injection vulnerability in the mbsendmail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds LF in the "To" address argument...

CVE-2005-3348

CVE-2005-3348 is a HTTP Response Splitting vulnerability in phpSysInfo (2.4 and earlier) used by phpGroupWare (0.9.16 and earlier) and eGroupWare (before 1.0.0.009). Exploitation via CRLF sequences in the charset parameter can cause web content spoofing and cache poisoning. OpenVAS entries (and D...

CVE-2005-3348: Cross-Site Request Forgery (CSRF)

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...

CVE-2005-3621

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...

DEBIAN-CVE-2005-3621

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...

CVE-2005-3621

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...

CVE-2005-3621

CVE-2005-3621 is a CRLF injection vulnerability in phpMyAdmin prior to 2.6.4-pl4 that enables HTTP response splitting via unspecified scripts. The vulnerability is documented in multiple sources (e.g., Debian DSA advisories and GHSA entries) and is associated with phpMyAdmin. The connected OpenVA...

CVE-2005-3621

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...

CVE-2005-3621

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...

CVE-2005-3621: Undefined Security Weakness

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...

CVE-2005-3496

Cross-site scripting XSS vulnerability in PHP Handicapper allows remote attackers to inject arbitrary web script or HTML via the msg parameter to msg.php. NOTE: some sources identify a second vector in the login parameter to processsignup.php, but the original source says that it is for CRLF...

php-handicapper.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 013 ------------------------------------------------------ Date - 10/2005 PHP HANDICAPPER Multiple Vulnerability AFFECTED PRODUCTS ================= PHP HANDICAPPER http://www.phphandicapper.com OVERVIEW ======== Out ...

PHP HANDICAPPER Multiple Vulnerability

DATE: ========= 2/11/2005 AFFECTED PRODUCTS ================= PHP HANDICAPPER http://www.phphandicapper.com OVERVIEW ======== Out Of The Box Complete Website, Easily Automate Your Sports Picks / Sports Information Predictions. All sports - football,basketball,boxin g,baseball, college, pro etc...

CVE-2004-2512

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the PHPSESSID parameter...

CVE-2004-2512

CVE-2004-2512 affects DCP-Portal 5.3.2 and earlier. It is a CRLF injection/vulnerability in calendar.php that enables HTTP response splitting via CRLF (%0d%0a) sequences in the PHPSESSID parameter, allowing spoofing of web content and potential cache poisoning. The provided documents confirm the ...

CVE-2004-2512: Undefined Security Weakness

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the PHPSESSID parameter...

guestbookInject.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 010 ------------------------------------------------------ Date - 10/2005 @lex Guestbook 3.3 XSS & CRLF injection AFFECTED PRODUCTS ================= @lex Guestbook http://www.alexphpteam.com OVERVIEW ======== Nice...

CVE-2005-2854

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...

CVE-2005-2854

The CVE-2005-2854 entry concerns the thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1. The vulnerability is a CRLF injection in the name and email fields, allowing remote attackers to inject headers and use the script as a mail relay (spam proxy). Multiple connected sources (NVD, R...

CVE-2005-2854

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...