NX5Linkx 1.0 - 'links.php' HTTP Response Splitting

EDB-ID:

28568




Platform:

PHP

Date:

2006-09-13


source: https://www.securityfocus.com/bid/20011/info

NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

http://www.example.com% 0D%0A%0D%0AHTTP/1.0 200 OK%0D%0A%0D% 0A.......