Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:58
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=111842744205117&w=2 - | |
References | () http://marc.info/?l=bugtraq&m=111936255011735&w=2 - | |
References | () http://secunia.com/advisories/15670 - | |
References | () http://www.gulftech.org/?node=research&article_id=00080-06102005 - | |
References | () http://www.securityfocus.com/bid/13979 - |
Information
Published : 2005-06-16 04:00
Updated : 2024-11-20 23:58
NVD link : CVE-2005-1951
Mitre link : CVE-2005-1951
CVE.ORG link : CVE-2005-1951
JSON object : View
Products Affected
oscommerce
- oscommerce
CWE