CVE-2005-4712 — MEDIUM (5.0)

Vulnerability Description

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Php Handicapper	Php Handicapper	All versions

References

http://www.zone-h.org/advisories/read/id=8360ExploitVendor Advisory
http://www.zone-h.org/advisories/read/id=8360ExploitVendor Advisory

FAQ

What is CVE-2005-4712?

CVE-2005-4712 is a vulnerability with a CVSS score of 5.0 (MEDIUM). CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed...

How severe is CVE-2005-4712?

CVE-2005-4712 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-4712?

Check the references section above for vendor advisories and patch information. Affected products include: Php Handicapper Php Handicapper.