medium5.0
CVE-2012-2943
CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitti…
Impact
CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Captcha | Cryptographp | All versions |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768