CVE-2008-6121
NONE EPSS 67.9%
Published Feb 11, 200917y ago · Modified Jun 16, 20262w ago
Published Feb 11, 2009 17y ago
Last Modified Jun 16, 2026 2w ago
Description
CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie.
Threat Intelligence
EPSS Exploit Probability
67.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| socialengine | socialengine | * | ≤2.7 |
References 3
- marc.info http://marc.info/?l=bugtraq&m=122720734728665&w=2
- securityfocus.com http://www.securityfocus.com/bid/32382
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/46771
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.