4105 matches found
CVE-2005-3633
The CVE-2005-3633 entry describes an HTTP response splitting vulnerability in SAP Web Application Server (WAS) 6.10 through 7.00. The issue affects frameset.htm, allowing remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter. The vulnerability’s root cause is improper ha...
CVE-2005-3633
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server WAS 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter...
DEBIAN-CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
CVE-2005-3621
CVE-2005-3621 is a CRLF injection vulnerability in phpMyAdmin prior to 2.6.4-pl4 that enables HTTP response splitting via unspecified scripts. The vulnerability is documented in multiple sources (e.g., Debian DSA advisories and GHSA entries) and is associated with phpMyAdmin. The connected OpenVA...
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts...
phpSysInfo < 2.4.1 Multiple Vulnerabilities
The remote host is running phpSysInfo, a PHP application that parses the /proc entries on Linux/Unix systems and displays them in HTML. The installed version of phpSysInfo on the remote host has a design flaw in its globalization layer such that the script's variables can be overwritten independe...
phpwcms 1.2.5 Multiple Vulnerabilities
The remote host is running phpwcms, an open source content management system written in PHP. The version of phpwcms installed on the remote host does not sanitize input to the 'formlang' parameter of the 'login.php' script before using it in PHP 'include' functions. An unauthenticated attacker ca...
DSA-897-1 phpsysinfo - programming errors
Bulletin has no description...
Hardened-PHP Project Security Advisory 2005-21.81
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz Application: phpSysInfo 2.4 and prior Severity: Cross-Site...
phpmyadmin -- HTTP Response Splitting vulnerability
A phpMyAdmin security advisory reports: Some scripts in phpMyAdmin are vulnerable to an HTTP Response Splitting attack. Severity: We consider these vulnerabilities to be serious. However, they can only be triggered on systems running with registerglobals = on...
[Full-disclosure] [FS-05-02] Multiple vulnerabilities in phpMyAdmin
=============================================================================== Security Advisory http://www.fitsec.com/advisories/FS-05-02.txt Severity: Low/Medium Title: Multiple vulnerabilities in phpMyAdmin Date: 12.11.2005 ID: FS-05-02 Author: Toni Koivunen toni.koivunen at fitsec.com - - - ...
[Full-disclosure] Advisory 22/2005: Multiple vulnerabilities in phpSysInfo
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz [email protected] Application: phpSysInfo 2....
PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities
PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to...
PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to cross-site scripting, HTTP response splitting and arbitrary...
[Full-disclosure] CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS
The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryHTTPResponseSplittinginSAPWAS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: HTTP Response Splitting in SAP WAS Web Application Server Vulnerability Class: HTTP Response Splitti...
SAP Web Application Server 6.x/7.0 - Input Validation
source: https://www.securityfocus.com/bid/18006/info SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit...