Unrated severityNVD Advisory· Published Dec 31, 2005· Updated Jun 16, 2026
CVE-2005-4712
CVE-2005-4712
Description
CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.
Affected products
2(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:php_handicapper:php_handicapper:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.zone-h.org/advisories/read/id=8360nvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.