CVE-2006-6965

2007-01-2917:28:00

mitre

web.nvd.nist.gov

crlf injection

dokuwiki

cve-2006-6965

vulnerability

http response splitting

xss attacks

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

High

EPSS

0.008

Percentile

82.3%

JSON

CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.

Affected configurations

Nvd

Node

andreas_gohrdokuwikiMatchrelease_2006-03-09

andreas_gohrdokuwikiMatchrelease_2006-03-09e

VendorProductVersionCPE
andreas_gohrdokuwikirelease+2006-03-09cpe:/a:andreas_gohr:dokuwiki:release+2006-03-09:::
andreas_gohrdokuwikirelease+2006-03-09ecpe:/a:andreas_gohr:dokuwiki:release+2006-03-09e:::

Vendor	Product	Version	CPE
andreas_gohr	dokuwiki	release+2006-03-09	cpe:/a:andreas_gohr:dokuwiki:release+2006-03-09:::
andreas_gohr	dokuwiki	release+2006-03-09e	cpe:/a:andreas_gohr:dokuwiki:release+2006-03-09e:::