VULNERABILITY INTELLIGENCE
CVE-2005-0843
CVSS score5 MEDIUM
EPSS probability3.90%
CISA KEVNot currently listed
Published2005-05-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
Primary references
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory