CVE-2008-3906

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

7.10% chance of exploitation in the next 30 days, 94th percentile

Published

2008-09-04

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32303

References

• CVE Record
• NVD entry

Related

• CVE-2008-3892
• CVE-2008-3917
• CVE-2008-3889
• CVE-2008-3918
• CVE-2008-3888
• CVE-2008-3922