CVE-2008-6121

Description

CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/46771

http://www.securityfocus.com/bid/32382

http://marc.info/?l=bugtraq&m=122720734728665&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS