HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: debian
Published: 2005-11-18T02:00:00
Updated: 2024-08-07T23:10:08.487Z
Reserved: 2005-10-27T00:00:00
Link: CVE-2005-3348
Vulnrichment
No data.
NVD
Status : Modified
Published: 2005-11-18T02:02:00.000
Modified: 2024-11-21T00:01:40.793
Link: CVE-2005-3348
Redhat
No data.