Description
CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".
References (4)
Scores
EPSS
0.0078
EPSS Percentile
73.8%
Details
CWE
CWE-93
Status
published
Products (9)
matthieu_aubry/phpmyvisites
0.1_beta
matthieu_aubry/phpmyvisites
1.0
matthieu_aubry/phpmyvisites
1.1
matthieu_aubry/phpmyvisites
1.2
matthieu_aubry/phpmyvisites
1.2.1
matthieu_aubry/phpmyvisites
1.2.2
matthieu_aubry/phpmyvisites
1.2_beta
matthieu_aubry/phpmyvisites
1.3
matthieu_aubry/phpmyvisites
< 2.1
Published
Feb 12, 2007
Tracked Since
Feb 18, 2026