VULNERABILITY INTELLIGENCE

CVE-2005-4712

CVSS score5 MEDIUM
EPSS probability1.11%
CISA KEVNot currently listed
Published2005-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

Primary references