Description

Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.

Remediation

References

CVE-2005-1951

Related Vulnerabilities

PHP Other Vulnerability (CVE-2019-11044)

WordPress Plugin Telefication Server-Side Request Forgery (1.8.0)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.51)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16147)

WebLogic CVE-2023-21841 Vulnerability (CVE-2023-21841)

Severity

Medium

Classification

CVE-2005-1951

Tags

Missing Update Known Vulnerabilities