Description
CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter.
References
- 55295 third-party-advisory
- http://packetstormsecurity.com/files/123771/WebCollab-3.30-HTTP-Response-Splitting.html
- 20131024 [ISecAuditors Security Advisories] HTTP Response Splitting Vulnerability in WebCollab <= v3.30 mailing-list
- 98768 vdb-entry
- webcollab-cve20132652-response-splitting(88177) vdb-entry
- 63247 vdb-entry
- 55235 third-party-advisory
- [Webcollab-announce] 20131018 Webcollab 3.31 Released mailing-list