VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2005· Updated Jun 16, 2026

CVE-2005-4712

CVE-2005-4712

Description

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

Affected products

2
  • PHP Handicapper/PHP Handicapper2 versions
    cpe:2.3:a:php_handicapper:php_handicapper:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php_handicapper:php_handicapper:*:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.