CVE-2005-4712

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-12-31

Last modified

2024-09-16

Affected products

• Php Handicapper (Php Handicapper)

References

• http://www.zone-h.org/advisories/read/id=8360