HTTP Response Splitting Vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta

HTTP Response Splitting Vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta

CVE-2005-2060 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.

Learn more about our Web App Pen Testing.