Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2011-1398 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2011-1398

Medium
Reference: CVE-2011-1398
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-1398
Title: PHP Improper Input Validation Vulnerability
Overview:

The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for 0D sequences (aka carriage return characters) which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL related to improper interaction between the PHP header function and certain browsers as demonstrated by Internet Explorer and Google Chrome.