CVE-2008-0202 CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL paramet...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| expressionengine | <= 1.2.1 | No fix listed |
References
- 20080103 securityvulns.com russian vulnerabilities digest mailing-list
- 3539 third-party-advisory
- securityvulns.ru
- websecurity.com.ua
- 20080103 securityvulns.com russian vulnerabilities digest mailing-list
- 27128 vdb-entry