Vulnerability Details CVE-2012-2943
CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768
Products affected by CVE-2012-2943
-
cpe:2.3:a:captcha:cryptographp:-