Vulnerabilities > CVE-2005-4712 - Remote Security vulnerability in PHP Handicapper
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |