CVE

Id
13157  
CVE No.
CVE-2005-1951  
Status
Candidate  
Description
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.  
Phase
Assigned (20050614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
94824 13157 CVE-2005-1951 BUGTRAQ:20050610 osCommere HTTP Response Splitting  View
94825 13157 CVE-2005-1951 URL:http://marc.info/?l=bugtraq&m=111842744205117&w=2  View
94826 13157 CVE-2005-1951 MISC:http://www.gulftech.org/?node=research&article_id=00080-06102005  View
94827 13157 CVE-2005-1951 BUGTRAQ:20050616 RE: osCommere HTTP Response Splitting (Solution)  View
94828 13157 CVE-2005-1951 URL:http://marc.info/?l=bugtraq&m=111936255011735&w=2  View
94829 13157 CVE-2005-1951 BID:13979  View
94830 13157 CVE-2005-1951 URL:http://www.securityfocus.com/bid/13979  View
94831 13157 CVE-2005-1951 SECUNIA:15670  View

Related JVN