QwikSec

Security Database

CVE

CWE

Training

CVE-2005-2060

Published: Jun 28, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351

x_refsource_MISC

http://www.gulftech.org/?node=research&article_id=00084-06232005

x_refsource_MISC

20050624 Infopop UBB Threads Multiple Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.