Description

CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter.

Remediation

References

CVE-2011-4545

Related Vulnerabilities

WordPress Plugin GigPress Cross-Site Scripting (2.3.27)

WordPress Plugin Page Builder:PageLayer-Drag and Drop website builder Cross-Site Request Forgery (1.1.1)

WordPress Plugin Easy Forms for MailChimp Unspecified Vulnerability (6.3.2)

Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-34117)

Apache Tomcat Improper Input Validation Vulnerability (CVE-2012-3544)

Severity

Medium

Classification

CVE-2011-4545 CWE-94

Tags

Missing Update Known Vulnerabilities