Crlf injection

An improper neutralization of CRLF sequences in HTTP headers 'HTTP Response Splitting' vulnerability CWE-113 In FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.4.0 through 6.4.2, FortiWeb version 6.3.6 through 6.3.20 may allow an authenticated and remote attacker to inject arbitrary...

Mandriva Linux Security Advisory : perl-CGI (MDVSA-2010:237)

A new version of the CGI Perl module has been released to CPAN, which fixes several security bugs which directly affect Bugzilla these two security bugs where first discovered as affecting Bugzilla, then identified as being bugs in CGI.pm itself. The multipartinit function in 1 CGI.pm before 3.50...