high7.5Public exploit code
CVE-2006-4505
CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NX5Linkx 1.0 - 'links.php' HTTP Response Splitting2006-09-13 · webapps · php · Verified
Impact
CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nx5 | Nx5linx | Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21922
- http://www.evuln.com/vulns/138/
- http://www.securityfocus.com/archive/1/445916/100/0/threaded
- http://www.securityfocus.com/bid/20011
- http://www.vupen.com/english/advisories/2006/3631
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28634
- http://secunia.com/advisories/21922
- http://www.evuln.com/vulns/138/
- http://www.securityfocus.com/archive/1/445916/100/0/threaded
- http://www.securityfocus.com/bid/20011
- http://www.vupen.com/english/advisories/2006/3631
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28634