CVE-2005-1951 Other in n/a

What is CVE-2005-1951?

CVE-2005-1951 is a medium-severity vulnerability in Oscommerce Oscommerce, published on 14 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.

Which versions are affected by CVE-2005-1951?

It affects 1 product.

Products include Oscommerce Oscommerce.

How do I fix CVE-2005-1951?

No fix has been published for CVE-2005-1951 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-1951 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-1951 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Oscommerce Oscommerce

• CVE-2020-23360 Auth bypass in n/a Critical 9.8
• CVE-2020-27976 Command injection in n/a Critical 9.8
• CVE-2019-25495 osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter High 8.8
• CVE-2019-25496 osCommerce 2.3.4.1 SQL Injection via products_id Parameter High 8.8
• CVE-2019-25497 osCommerce 2.3.4.1 SQL Injection via currency Parameter High 8.8

All Oscommerce Oscommerce vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3wmj-p44f-xcmr.