cubecart-crlf.txt

Note to BugTraq: Forgot to tell which files are vulnerable. Sorry! CubeCart v3.0.15 - CRLF Injection Vulnerability It is possible to set the cookie prefixed with ccSID to cause CRLF injection. Vulnerable files: cart.php, index.php HTTP Request: ------------- GET / HTTP/1.0 Accept: / User-Agent:...