• info
• discussion
• exploit
• solution
• references

SQWebmail HTTP Response Splitting Vulnerability

No exploit is required.

The following proof of concept is available:
sqwebmail?redirect=%0d%0a%0d%0a[INJECT SCRIPT]