NVD

Id
61785  
Name
CVE-2006-3105  
Description
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-20  
Modified Date
2008-09-05  
Seq
2006-3105  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319843 61785 CVE-2006-3105 http://retrogod.altervista.org/bitweaver_13_xpl.html  View
319844 61785 CVE-2006-3105 1115  View
319845 61785 CVE-2006-3105 http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358  View
319846 61785 CVE-2006-3105 http://www.bitweaver.org/articles/45  View
319847 61785 CVE-2006-3105 20060617 bitweaver <= v1.3 multiple vulnerabilities  View
319848 61785 CVE-2006-3105 bitweaver-crlf-header-injection(27348)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61765 JVNDB-2006-004031 Bitweaver における CRLF インジェクションの脆弱性 Bitweaver 1.3 には、CRLF インジェクションの脆弱性が存在します。 CVE-2006-3105 19207 CVE-2006-3105 61785 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-004031.html 2006-06-21 2014-03-11 View