Security Advisory
CVE-2004-1507
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server.