Vulners
Lucene search
2 matches found
CVE-2012-4388
The sapiheaderop function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences aka carriage return characters, which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improp...
4.3CVSS6.3AI score0.02187EPSS
Exploits2References11
CVE-2012-4388
The sapiheaderop function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences aka carriage return characters, which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improp...
4.3CVSS5.9AI score0.02187EPSS
Exploits2References4
20