CVE-2005-2065
HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2005-06-29
- Last modified
- 2024-08-07
Affected products
References
- http://marc.info/?l=bugtraq&m=111989223906484&w=2
- http://www.securityfocus.com/bid/14063