Description
CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server.
References
- 20041109 Multiple Vulnerabilities in WebCalendar mailing-list
- webcalendar-response-splitting(18027) vdb-entry
- 11651 vdb-entry
- 13164 third-party-advisory