Unscored CVE-2005-1180 EUVD-2005-1183GHSA-4j8j-2v7f-q63r

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web cac…

Published Apr 19, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter.

References

http://www.digitalparadox.org/advisories/pnuke.txt
15647 vdb-entry
14965 third-party-advisory
php-nuke-http-response-splitting(20116) vdb-entry
20050415 Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below mailing-list