CVE

Id
19209  
CVE No.
CVE-2006-3105  
Status
Candidate  
Description
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php.  
Phase
Assigned (20060620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171554 19209 CVE-2006-3105 BUGTRAQ:20060617 bitweaver <= v1.3 multiple vulnerabilities  View
171555 19209 CVE-2006-3105 URL:http://www.securityfocus.com/archive/1/archive/1/437491/100/0/threaded  View
171556 19209 CVE-2006-3105 MISC:http://retrogod.altervista.org/bitweaver_13_xpl.html  View
171557 19209 CVE-2006-3105 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358  View
171558 19209 CVE-2006-3105 CONFIRM:http://www.bitweaver.org/articles/45  View
171559 19209 CVE-2006-3105 OSVDB:26590  View
171560 19209 CVE-2006-3105 URL:http://www.osvdb.org/26590  View
171561 19209 CVE-2006-3105 SREASON:1115  View
171562 19209 CVE-2006-3105 URL:http://securityreason.com/securityalert/1115  View
171563 19209 CVE-2006-3105 XF:bitweaver-crlf-header-injection(27348)  View

Related JVN