Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-5285. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates an HTTP response splitting vulnerability in Kallithea 0.2.9 via the 'came_from' parameter. The PoC shows how an attacker can inject malicious headers and control the HTTP response by manipulating the parameter with CRLF sequences.
Description
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
Exploits (1)
This exploit demonstrates an HTTP response splitting vulnerability in Kallithea 0.2.9 via the 'came_from' parameter. The PoC shows how an attacker can inject malicious headers and control the HTTP response by manipulating the parameter with CRLF sequences.