PT-2005-1871 · Phorum · Phorum

Alexander Anisimov · Published 2005-03-24 · Updated 2016-10-18 · CVE-2005-0843

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Phorum version 5.0.14a

Description The issue concerns a CRLF injection vulnerability in the search.php file. This vulnerability allows remote attackers to perform HTTP Response Splitting attacks by manipulating the body parameter, which is then included in the resulting Location header.

Recommendations For Phorum version 5.0.14a, consider restricting access to the search.php file or the body parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the body parameter in the search.php file.

Exploit

Fix

Related Identifiers

CVE-2005-0843

Affected Products

Phorum

References · 5

• 🔥 https://exploit-db.com/exploits/25258 · Exploit
• http://secunia.com/advisories/14680 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0843 · Security Note
• http://marc.info/?l=bugtraq&m=111151651621097&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0843 · Note