CVE-2004-2512

CVE-2004-2512 affects DCP-Portal 5.3.2 and earlier. It is a CRLF injection/vulnerability in calendar.php that enables HTTP response splitting via CRLF (%0d%0a) sequences in the PHPSESSID parameter, allowing spoofing of web content and potential cache poisoning. The provided documents confirm the ...

CVE-2004-2512

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the PHPSESSID parameter...