Vulnerability Details CVE-2012-2943
CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768
- http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html
- http://www.securityfocus.com/bid/53609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75768
Products affected by CVE-2012-2943
-
cpe:2.3:a:captcha:cryptographp:-