CVE-2012-2943 CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| captcha cryptographp | All versions | No fix listed |
References
- packetstormsecurity.org
- 53609 vdb-entry
- cryptographp-cfg-response-splitting(75768) vdb-entry