Security Advisory

CVE-2005-3982

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-12-04 11:00:00
Last updated 2024-08-07 23:31:49
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.