high7.5
CVE-2008-6121
CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting …
Impact
CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Socialengine | Socialengine | through 2.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=122720734728665&w=2
- http://www.securityfocus.com/bid/32382
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46771
- http://marc.info/?l=bugtraq&m=122720734728665&w=2
- http://www.securityfocus.com/bid/32382
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46771