CVE-2006-3105 | BDVDB-2026-17643 Detail
Description#
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358
- http://retrogod.altervista.org/bitweaver_13_xpl.html
- http://www.osvdb.org/26590
- http://www.bitweaver.org/articles/45
- http://securityreason.com/securityalert/1115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27348
- http://www.securityfocus.com/archive/1/437491/100/0/threaded
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.