Description

CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the url path parameter.

Remediation

References

CVE-2012-5057

Related Vulnerabilities

WordPress Plugin Grid Gallery-Photo Image Grid Gallery Cross-Site Scripting (1.2.4)

WordPress Plugin ImportWP-Import any XML or CSV File into WordPress Security Bypass (1.1.5)

WordPress Plugin WordPress Button Plugin MaxButtons Multiple Cross-Site Scripting Vulnerabilities (1.36)

Oracle Database Server Other Vulnerability (CVE-2002-0857)

Joomla! Core 1.7.x Cross-Site Scripting (1.7.0 - 1.7.3)

Severity

Medium

Classification

CVE-2012-5057

Tags

Missing Update Known Vulnerabilities