CVEvulnerability

CVE-2005-3348

4.3 MEDIUM Published 2005-11-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-11-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-352

Description

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.

Affected configurations

• phpsysinfo phpsysinfo 2.0 • phpsysinfo phpsysinfo 2.1 • phpsysinfo phpsysinfo 2.3 • phpsysinfo phpsysinfo 2.4

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References