4 matches found
Crlf injection
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter...
CVE-2006-1714
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter...
CVE-2006-1713
CVE-2006-1713: Cross-site scripting (XSS) in phpMyForum 4.0 (index.php) allows remote attackers to inject arbitrary script/HTML via the page parameter. Affected software: phpMyForum 4.0. Root cause: input in the page parameter is not properly sanitized before output. Impact is web-script injectio...
CVE-2006-1714
CVE-2006-1714 is a CRLF injection vulnerability in the phpMyForum 4.0 index.php file. The issue allows remote attackers to inject HTTP headers by sending hex-encoded CRLF sequences through the type parameter, enabling header manipulation. The affected component is the index.php handler of Christo...