CVE-2018-6889

TypeSetter CMS 5.1 is affected by a Host header injection vulnerability. The root cause is improper handling of the Host header, enabling attackers to poison web caches, execute advanced password-reset attacks, and trigger arbitrary user redirection. Public disclosures and PoCs in connected sourc...

CVE-2018-6889: Improper Control of Generation of Code

An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a malicious user can poison the web cache or perform advanced password reset attacks or even trigger arbitrary user re-direction...

PT-2018-17804

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description An issue was discovered in Typesetter, which suffers from a Host header injection vulnerability. This allows a malicious user to poison the web cache, perform advanced password reset attacks, or trigger...