CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cryptographp | Captcha | - (including) | - (including) |
References
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768