Description

CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Remediation

References

CVE-2007-5595

Related Vulnerabilities

Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-12309)

MyBB CVE-2006-0218 Vulnerability (CVE-2006-0218)

WordPress Plugin Admin Custom Login Cross-Site Scripting (2.5.3.1)

WordPress Plugin Subscriptions & Memberships for PayPal Unspecified Vulnerability (1.1.5)

Joomla! Core Directory Traversal (2.5.0 - 3.9.20)

Severity

Medium

Classification

CVE-2007-5595 CWE-113

Tags

Missing Update Known Vulnerabilities