Description
CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
References
- ADV-2008-1660 vdb-entry
- 29373 vdb-entry
- http://forum.mambo-foundation.org/showthread.php?t=11799
- 30343 third-party-advisory
- mambo-unspecified-response-splitting(42645) vdb-entry