Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2012-4388 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2012-4388

Medium
Reference: CVE-2012-4388
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-4388
Title: PHP Improper Input Validation Vulnerability
Overview:

The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for 0D sequences (aka carriage return characters) which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL related to improper interaction between the PHP header function and certain browsers as demonstrated by Internet Explorer and Google Chrome. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1398.