CVE-2006-5565 Other in n/a
Remote attackers can inject arbitrary HTTP headers via CRLF sequences in specific parameters of the MD-Pro web application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-5565?
CVE-2006-5565 is a medium-severity vulnerability in n/a, published on 27 Oct 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4) func parameters in (a) index.php; and the (5) file parameter in (b) modules.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Which versions are affected by CVE-2006-5565?
It affects 1 product.
Products include Maxdev Md-Pro.
How do I fix CVE-2006-5565?
No fix has been published for CVE-2006-5565 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-5565 being exploited?
There is no known exploitation of CVE-2006-5565 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8fj6-67j3-m4hj.