CVE-2008-0202 in ExpressionEngine

Summary

CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 01/09/2008
• Disclosure: 01/09/2008
• Moderation: VulDB entry created
• Entries: 1: VDB-40467
• CPE: ready
• CWE: CWE-94 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.00551
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-0202
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-0202
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-0202/