CVEvulnerability
CVE-2008-0202
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-94
Description
CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.
Affected configurations
• expressionengine expressionengine (<= 1.2.1)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html lists.grok.org.uk
- http://securityreason.com/securityalert/3539 securityreason.com
- http://securityvulns.ru/Sdocument472.html securityvulns.ru
- http://websecurity.com.ua/1454/ websecurity.com.ua
- http://www.securityfocus.com/archive/1/485786/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27128 www.securityfocus.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html lists.grok.org.uk
- http://securityreason.com/securityalert/3539 securityreason.com
- http://securityvulns.ru/Sdocument472.html securityvulns.ru
- http://websecurity.com.ua/1454/ websecurity.com.ua
- http://www.securityfocus.com/archive/1/485786/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27128 www.securityfocus.com