Vulnerability in Php Handicapper
CVE-2005-4712
CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.
EPSS: 0.011 (61.7th percentile) — read the EPSS interpretation.
Affected products
- Php_handicapper
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)