Cryptographp Local File Inclusion / HTTP Response Splitting

Exploit for php platform in category web applications During a security assessment, I’ve found that my target was using Cryptographp which is a PHP script used for generate « captchas ». It was easily noticeable when I’ve found the following URL: http://WWWW/cryptographp.inc.php?cfg=XX&sn=YYYY&ZZ...

CVE-2012-0181

creationtimestamp| type| source ---|---|--- 2012-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18894...

CVE-2012-6555

creationtimestamp| type| source ---|---|--- 2012-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18908...

CVE-2012-2906

creationtimestamp| type| source ---|---|--- 2012-05-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37217...

CVE-2012-2271

creationtimestamp| type| source ---|---|--- 2012-05-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18892...

CVE-2012-2629

creationtimestamp| type| source ---|---|--- 2012-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18886 2020-02-20 07:52:03+00:00| seen| https://t.me/cibsecurity/9949...

CVE-2012-2914

creationtimestamp| type| source ---|---|--- 2012-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37216...

CVE-2012-2905

creationtimestamp| type| source ---|---|--- 2012-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18889...

CVE-2012-2911

creationtimestamp| type| source ---|---|--- 2012-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37208...

CVE-2012-2904

creationtimestamp| type| source ---|---|--- 2012-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37205...

CVE-2012-2910

creationtimestamp| type| source ---|---|--- 2012-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37207 2012-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37206...

CVE-2012-2913

creationtimestamp| type| source ---|---|--- 2012-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37191 2012-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37192...

CVE-2012-2917

creationtimestamp| type| source ---|---|--- 2012-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37202...

CVE-2012-6622

creationtimestamp| type| source ---|---|--- 2012-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37195...

CVE-2012-6624

creationtimestamp| type| source ---|---|--- 2012-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37203...

CVE-2012-6626

creationtimestamp| type| source ---|---|--- 2012-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18882...

CVE-2012-3795

creationtimestamp| type| source ---|---|--- 2012-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18878...

CVE-2012-3794

creationtimestamp| type| source ---|---|--- 2012-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18878...

CVE-2012-3796

creationtimestamp| type| source ---|---|--- 2012-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18878...

CVE-2012-3793

creationtimestamp| type| source ---|---|--- 2012-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18878...