CVEs-PoC/2004/CVE-2004-2512.md

CVE-2004-2512

Description

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.

POC

Reference

No PoCs from references.

Github

• https://github.com/Farrhouq/Inpt-report