Files
CVEs-PoC/2004/CVE-2004-2512.md
2025-09-29 21:09:30 +02:00

705 B

CVE-2004-2512

Description

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.

POC

Reference

No PoCs from references.

Github