CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-02-11T17:25:00
Updated: 2024-08-07T11:20:25.214Z
Reserved: 2009-02-11T00:00:00
Link: CVE-2008-6121
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-02-11T17:30:00.500
Modified: 2017-08-08T01:33:45.360
Link: CVE-2008-6121
Redhat
No data.