CVE-2005-3982

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

7.08% chance of exploitation in the next 30 days, 94th percentile

Published

2005-12-04

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/26691

Security advisories

• http://secunia.com/advisories/17848
• http://secunia.com/advisories/19240
• http://www.debian.org/security/2006/dsa-1002
• http://www.securityfocus.com/bid/15673

References

• CVE Record
• NVD entry