CVE-2002-1783 | BDVDB-2026-10912 Detail

Description#

CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2002-09/0132.html
http://www.securityfocus.com/bid/5681
https://exchange.xforce.ibmcloud.com/vulnerabilities/10080
http://www.debian.org/security/2002/dsa-168
http://archives.neohapsis.com/archives/bugtraq/2002-09/0086.html

Exploit#

No public exploit known

History#

Version 12005-06-28Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.