Just William’s Amazon Webstore – HTTP Response Splitting

漏洞ID	1055068	漏洞类型
发布时间	2005-04-28	更新时间	2005-04-28
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/25567

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/13428/info

Amazon Webstore is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how Web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

This issue reportedly affects Amazon Webstore version 04050100; other versions may also be vulnerable. 

http://www.example.com/store/uk/product/">%0d%0aSet-Cookie:%20HTTP_response_splitting%3dYES%0d%0aFoo:%20bar.htm

相关推荐: WSMP3 Multiple Buffer Overflow Vulnerabilities

WSMP3 Multiple Buffer Overflow Vulnerabilities 漏洞ID 1101225 漏洞类型 Unknown 发布时间 2002-11-25 更新时间 2002-11-25 CVE编号 N/A CNNVD-ID N/A 漏洞…