3286 matches found
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
CVE-2005-3621
CVE-2005-3621 is a CRLF injection vulnerability in phpMyAdmin prior to 2.6.4-pl4 that enables HTTP response splitting via unspecified scripts. The vulnerability is documented in multiple sources (e.g., Debian DSA advisories and GHSA entries) and is associated with phpMyAdmin. The connected OpenVA...
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
phpSysInfo < 2.4.1 Multiple Vulnerabilities
The remote host is running phpSysInfo, a PHP application that parses the /proc entries on Linux/Unix systems and displays them in HTML. The installed version of phpSysInfo on the remote host has a design flaw in its globalization layer such that the script's variables can be overwritten independe...
phpwcms 1.2.5 Multiple Vulnerabilities
The remote host is running phpwcms, an open source content management system written in PHP. The version of phpwcms installed on the remote host does not sanitize input to the 'formlang' parameter of the 'login.php' script before using it in PHP 'include' functions. An unauthenticated attacker ca...
DSA-897-1 phpsysinfo - programming errors
Bulletin has no description...
[Full-disclosure] [FS-05-02] Multiple vulnerabilities in phpMyAdmin
=============================================================================== Security Advisory http://www.fitsec.com/advisories/FS-05-02.txt Severity: Low/Medium Title: Multiple vulnerabilities in phpMyAdmin Date: 12.11.2005 ID: FS-05-02 Author: Toni Koivunen toni.koivunen at fitsec.com - - - ...
Hardened-PHP Project Security Advisory 2005-21.81
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz Application: phpSysInfo 2.4 and prior Severity: Cross-Site...
phpmyadmin -- HTTP Response Splitting vulnerability
A phpMyAdmin security advisory reports: Some scripts in phpMyAdmin are vulnerable to an HTTP Response Splitting attack. Severity: We consider these vulnerabilities to be serious. However, they can only be triggered on systems running with registerglobals = on...
[Full-disclosure] Advisory 22/2005: Multiple vulnerabilities in phpSysInfo
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz [email protected] Application: phpSysInfo 2....
PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities
PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to...
PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to cross-site scripting, HTTP response splitting and arbitrary...
[Full-disclosure] CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS
The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryHTTPResponseSplittinginSAPWAS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: HTTP Response Splitting in SAP WAS Web Application Server Vulnerability Class: HTTP Response Splitti...
SAP Web Application Server 6.x/7.0 - Input Validation
source: https://www.securityfocus.com/bid/18006/info SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit...
Multiple SAP Web Application Server vulnerabilities
Crossite scripting, request redirection, HTTP response splitting...
SAP Web Application Server 6.x7.0 - Input Validation
SAP Web Application Server 6.x7.0 - Input Validation source: https://www.securityfocus.com/bid/18006/info SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitiz...
PHP Handicapper - Process_signup.php HTTP Response Splitting
PHP Handicapper - Processsignup.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15301/info PHP Handicapper is vulnerable to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker...
Snitz Forums 2000 HTTP Response Splitting
The remote host is using Snitz Forums 2000 - an ASP based forum/bbs. There is a bug in this software which makes it vulnerable to HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...
IdealBB multiple flaws
The remote version of this IdealBB is vulnerable to multiple flaws: SQL injection, cross-site scripting and HTTP response splitting vulnerabilities. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...