Description

CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.

Remediation

References

CVE-2002-1783

Related Vulnerabilities

WordPress Plugin 301 Redirects-Easy Redirect Manager Cross-Site Request Forgery (2.72)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43735)

PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-12461)

Squid Improper Input Validation Vulnerability (CVE-2016-4555)

MySQL CVE-2018-3187 Vulnerability (CVE-2018-3187)

Severity

Medium

Classification

CVE-2002-1783

Tags

Missing Update Known Vulnerabilities