medium5.0Public exploit code
CVE-2005-1951
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- osCommerce 2.1/2.2 - Multiple HTTP Response Splitting Vulnerabilities2005-06-17 · webapps · php · Verified
Impact
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oscommerce | Oscommerce | Versions 2.1, 2.2_cvs, 2.2_ms1, 2.2_ms2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111842744205117&w=2
- http://marc.info/?l=bugtraq&m=111936255011735&w=2
- http://secunia.com/advisories/15670
- http://www.gulftech.org/?node=research&article_id=00080-06102005
- http://www.securityfocus.com/bid/13979
- http://marc.info/?l=bugtraq&m=111842744205117&w=2
- http://marc.info/?l=bugtraq&m=111936255011735&w=2
- http://secunia.com/advisories/15670
- http://www.gulftech.org/?node=research&article_id=00080-06102005
- http://www.securityfocus.com/bid/13979