CVEvulnerability

CVE-2005-3982

5.0 MEDIUM Published 2005-12-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.

Affected configurations

• webcalendar webcalendar 1.0.1

References