PT-2005-1871 · Phorum · Phorum

Alexander Anisimov · Publicado 2005-03-24 · Atualizado 2016-10-18 · CVE-2005-0843

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Phorum version 5.0.14a

Description The issue concerns a CRLF injection vulnerability in the search.php file. This vulnerability allows remote attackers to perform HTTP Response Splitting attacks by manipulating the body parameter, which is then included in the resulting Location header.

Recommendations For Phorum version 5.0.14a, consider restricting access to the search.php file or the body parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the body parameter in the search.php file.

Exploit

Correção

Identificadores relacionados

CVE-2005-0843

Produtos afetados

Phorum

Referências · 5

• 🔥 https://exploit-db.com/exploits/25258 · Exploit
• http://marc.info/?l=bugtraq&m=111151651621097&w=2 · Nota
• http://secunia.com/advisories/14680 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0843 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0843 · Nota