CVE-2005-1180

Description

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20116

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1183

http://www.osvdb.org/15647

http://www.digitalparadox.org/advisories/pnuke.txt

http://secunia.com/advisories/14965

http://marc.info/?l=bugtraq&m=111359804013536&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS