medium5.0Public exploit code
CVE-2005-2065
HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASPNuke 0.80 - 'Language_Select.asp' HTTP Response Splitting2005-06-27 · webapps · asp · Verified
Impact
HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asp-Nuke | Asp-Nuke | Version 0.80 |