Description

Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.

Remediation

References

CVE-2006-0207

Related Vulnerabilities

Jenkins Improper Authentication Vulnerability (CVE-2014-2066)

WordPress Plugin Zedna Contact form Arbitrary File Upload (1.0)

WordPress Plugin WordPress Mega Menu-QuadMenu Remote Code Execution (2.0.6)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4856)

WordPress Plugin Blue Wrench Video Widget Cross-Site Request Forgery (1.0.5)

Severity

Medium

Classification

CVE-2006-0207 CWE-94

Tags

Missing Update Known Vulnerabilities