PHP-Nuke Surveys Module HTTP Response Splitting Vulnerability
BID:13201
Info
PHP-Nuke Surveys Module HTTP Response Splitting Vulnerability
| Bugtraq ID: | 13201 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 15 2005 12:00AM |
| Updated: | Apr 15 2005 12:00AM |
| Credit: | dcrab <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
Francisco Burzi PHP-Nuke 7.6 |
| Not Vulnerable: | |
Discussion
PHP-Nuke Surveys Module HTTP Response Splitting Vulnerability
PHP-Nuke is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
A remote attacker may exploit this vulnerability to influence or misrepresent how Web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.
This issue is reported to affect PHP-Nuke version 7.6; earlier versions may also be vulnerable.
PHP-Nuke is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
A remote attacker may exploit this vulnerability to influence or misrepresent how Web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.
This issue is reported to affect PHP-Nuke version 7.6; earlier versions may also be vulnerable.
Exploit / POC
PHP-Nuke Surveys Module HTTP Response Splitting Vulnerability
No exploit is required.
The following proof of concept is available:
http://www.example.com/modules.php?name=Surveys&pollID=1&forwarder=%0d%0a%0d%0a%3Chtml%3EHELLO AM VULNERABLE TO HTTP RESPONSE SPLITTING%3C/html%3E&voteID=1&voteID=2&voteID=3&voteID=4&voteID=5
No exploit is required.
The following proof of concept is available:
http://www.example.com/modules.php?name=Surveys&pollID=1&forwarder=%0d%0a%0d%0a%3Chtml%3EHELLO AM VULNERABLE TO HTTP RESPONSE SPLITTING%3C/html%3E&voteID=1&voteID=2&voteID=3&voteID=4&voteID=5
Solution / Fix
PHP-Nuke Surveys Module HTTP Response Splitting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP-Nuke Surveys Module HTTP Response Splitting Vulnerability
References:
References:
- PHP-Nuke Product Page (Francisco Burzi)
- PHPNuke INP Homepage (PHPNuke INP)
- Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below (dcrab