7.5
CVE-2006-4505
- EPSS 2.88%
- Veröffentlicht 31.08.2006 22:04:00
- Zuletzt bearbeitet 16.06.2026 22:29:14
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.88% | 0.85 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/21922
http://www.evuln.com/vulns/138/
http://www.securityfocus.com/archive/1/445916/100/0/threaded
http://www.vupen.com/english/advisories/2006/3631
http://www.securityfocus.com/bid/20011
https://exchange.xforce.ibmcloud.com/vulnerabilities/28634