medium5.0Public exploit code
CVE-2005-0843
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Phorum 3.x/5.0.x - HTTP Response Splitting2005-03-22 · webapps · php · Verified
Impact
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phorum | Phorum | Version 5.0.14a |