Skip to content
OpenAdvisories

Archive

October 2015

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2015-5285 Public exploit

    Kallithea CRLF injection vulnerability

    CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.