CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and previous versions allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
andrew simpson webcollab 3.21 |
||
andrew simpson webcollab 3.20 |
||
andrew simpson webcollab |
||
andrew simpson webcollab 2.60 |
||
andrew simpson webcollab 2.50 |
||
andrew simpson webcollab 2.01 |
||
andrew simpson webcollab 2.00 |
||
andrew simpson webcollab 1.62 |
||
andrew simpson webcollab 1.61 |
||
andrew simpson webcollab 1.32 |
||
andrew simpson webcollab 1.31 |
||
andrew simpson webcollab 3.10 |
||
andrew simpson webcollab 3.00 |
||
andrew simpson webcollab 2.30 |
||
andrew simpson webcollab 2.20 |
||
andrew simpson webcollab 1.71a |
||
andrew simpson webcollab 1.71 |
||
andrew simpson webcollab 1.51 |
||
andrew simpson webcollab 1.50 |
||
andrew simpson webcollab 1.42 |
||
andrew simpson webcollab 2.40 |
||
andrew simpson webcollab 2.31 |
||
andrew simpson webcollab 1.81 |
||
andrew simpson webcollab 1.80 |
||
andrew simpson webcollab 1.60a |
||
andrew simpson webcollab 1.60 |
||
andrew simpson webcollab 1.30 |
||
andrew simpson webcollab 1.3 |
||
andrew simpson webcollab 2.71 |
||
andrew simpson webcollab 2.70 |
||
andrew simpson webcollab 2.61 |
||
andrew simpson webcollab 2.11 |
||
andrew simpson webcollab 2.10 |
||
andrew simpson webcollab 1.70 |
||
andrew simpson webcollab 1.62a |
||
andrew simpson webcollab 1.41 |
||
andrew simpson webcollab 1.40 |
Vulmon