CVE-2018-16979

Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-09-12

Last modified

2024-09-16

Weaknesses

CWE-113

Affected products

• Monstra (Monstra)

References

• https://github.com/howchen/howchen/issues/4