CVE-2013-2652

CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter.

• andrew simpson webcollab (<= 3.30) • andrew simpson webcollab 1.3 • andrew simpson webcollab 1.30 • andrew simpson webcollab 1.31 • andrew simpson webcollab 1.32 • andrew simpson webcollab 1.40 • andrew simpson webcollab 1.41 • andrew simpson webcollab 1.42 • andrew simpson webcollab 1.50 • andrew simpson webcollab 1.51 • andrew simpson webcollab 1.60 • andrew simpson webcollab 1.60a • andrew simpson webcollab 1.61 • andrew simpson webcollab 1.62 • andrew simpson webcollab 1.62a • andrew simpson webcollab 1.70 • andrew simpson webcollab 1.71 • andrew simpson webcollab 1.71a • andrew simpson webcollab 1.80 • andrew simpson webcollab 1.81 • andrew simpson webcollab 2.00 • andrew simpson webcollab 2.01 • andrew simpson webcollab 2.10 • andrew simpson webcollab 2.11 • andrew simpson webcollab 2.20 • andrew simpson webcollab 2.30 • andrew simpson webcollab 2.31 • andrew simpson webcollab 2.40 • andrew simpson webcollab 2.50 • andrew simpson webcollab 2.60 • andrew simpson webcollab 2.61 • andrew simpson webcollab 2.70 • andrew simpson webcollab 2.71 • andrew simpson webcollab 3.00 • andrew simpson webcollab 3.10 • andrew simpson webcollab 3.20 • andrew simpson webcollab 3.21