Unscored CVE-2008-6121 EUVD-2008-6091GHSA-wwxc-vxcj-3h3p

CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP…

Published Feb 11, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie.

References

20081120 Social Engine 2.7 CRLF Injection + SQL injection mailing-list
socialengine-phpsessid-response-splitting(46771) vdb-entry
32382 vdb-entry