CVE-2006-5565
CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4) func parameters in (a) index.php; and the (5) file parameter in (b) modules.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2006-10-27
- Last modified
- 2024-08-07
Affected products
References
- http://secunia.com/advisories/22564
- http://www.securityfocus.com/bid/20754
- http://www.vupen.com/english/advisories/2006/4195
