HTTP Response Splitting Vulnerability in phpSysInfo by phpGroupWare
CVE-2005-3348

Currently unrated

Key Information:

Vendor

PHPsysinfo

Status
PHPsysinfo
Vendor
CVE Published:
18 November 2005

What is CVE-2005-3348?

A vulnerability exists in versions of phpSysInfo prior to 2.4 that allows attackers to exploit HTTP response splitting through crafted CRLF sequences in the charset parameter of index.php. This can lead to spoofing of web content and potential poisoning of web caches. Such vulnerabilities can compromise user sessions and disrupt normal website functionality, emphasizing the need for prompt security updates.

References

http://secunia.com/advisories/17616
third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDKSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/15396
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.