Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3906. PoCs published by Juraj Skripsky.
AI-analyzed exploit summary This is a writeup describing a vulnerability in Mono 2.0 and earlier where arbitrary HTTP headers can be injected due to lack of input sanitization. The provided code snippet demonstrates how query parameters can be directly saved into cookies without validation.
Description
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
Exploits (1)
This is a writeup describing a vulnerability in Mono 2.0 and earlier where arbitrary HTTP headers can be injected due to lack of input sanitization. The provided code snippet demonstrates how query parameters can be directly saved into cookies without validation.