NVD

Id
65508  
Name
CVE-2006-6965  
Description
CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-01-29  
Modified Date
2011-03-07  
Seq
2006-6965  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
341542 65508 CVE-2006-6965 GLSA-200704-08  View
341543 65508 CVE-2006-6965 http://sla.ckers.org/forum/read.php?3,880,1361#msg-1361  View
341544 65508 CVE-2006-6965 22236  View
341545 65508 CVE-2006-6965 ADV-2007-0357  View
341546 65508 CVE-2006-6965 dokuwiki-fetch-response-splitting(31930)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52557 JVNDB-2007-001249 DokuWiki の lib/exe/fetch.php におけるCRLF インジェクションの脆弱性 DokuWiki の lib/exe/fetch.php には、CRLF インジェクションの脆弱性が存在します。 CVE-2006-6965 23067 CVE-2006-6965 65508 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001249.html 2007-01-29 2012-06-26 View