medium5.0Public exploit code
CVE-2006-5566
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Shop-Script - Multiple HTTP Response Splitting Vulnerabilities2006-10-23 · webapps · php · Verified
Impact
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webasyst Llc | Shop-Script | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22541
- http://securityreason.com/securityalert/1791
- http://www.securityfocus.com/archive/1/449499/100/0/threaded
- http://www.securityfocus.com/bid/20685
- http://www.vupen.com/english/advisories/2006/4219
- http://secunia.com/advisories/22541
- http://securityreason.com/securityalert/1791
- http://www.securityfocus.com/archive/1/449499/100/0/threaded
- http://www.securityfocus.com/bid/20685
- http://www.vupen.com/english/advisories/2006/4219