Unrated severityNVD Advisory· Published Dec 28, 2005· Updated Jun 16, 2026
CVE-2005-4521
CVE-2005-4521
Description
CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in login_cookie_test.php and (2) ref parameter in login_select_proj_page.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
10- secunia.com/advisories/18181/nvdPatchVendor Advisory
- secunia.com/advisories/18221nvdPatchVendor Advisory
- www.gentoo.org/security/en/glsa/glsa-200512-12.xmlnvdPatch
- www.securityfocus.com/bid/16046/nvdPatch
- www.trapkit.de/advisories/TKADV2005-11-002.txtnvdExploitPatch
- secunia.com/advisories/18481nvd
- sourceforge.net/project/shownotes.phpnvd
- sourceforge.net/project/shownotes.phpnvd
- www.debian.org/security/2005/dsa-944nvd
- www.vupen.com/english/advisories/2005/3064nvd
News mentions
0No linked articles in our index yet.