CVE-2005-2065
ASP Nuke 0.80 - HTTP Response Splitting via LangCode Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-2065. PoCs published by Alberto Trivero.
AI-analyzed exploit summary This exploit demonstrates an HTTP response splitting vulnerability in ASPNuke by injecting CRLF characters into the LangCode parameter, allowing an attacker to manipulate HTTP headers. The provided URL shows how an attacker can inject a Set-Cookie header, potentially leading to cache poisoning or session fixation attacks.
Description
HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter.
Exploits (1)
This exploit demonstrates an HTTP response splitting vulnerability in ASPNuke by injecting CRLF characters into the LangCode parameter, allowing an attacker to manipulate HTTP headers. The provided URL shows how an attacker can inject a Set-Cookie header, potentially leading to cache poisoning or session fixation attacks.