NX5Linkx 1.0 - 'links.php' HTTP Response Splitting
| EKU-ID: 33790 | CVE: CVE-2006-4505;OSVDB-28840 | OSVDB-ID: |
| Author: Aliaksandr Hartsuyeu | Published: 2006-09-13 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 33790 | CVE: CVE-2006-4505;OSVDB-28840 | OSVDB-ID: |
| Author: Aliaksandr Hartsuyeu | Published: 2006-09-13 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/20011/info NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust. http://www.example.com% 0D%0A%0D%0AHTTP/1.0 200 OK%0D%0A%0D% 0A.......