← Database

CVE-2006-0207

MEDIUM CVSS: 5.0 Published: 2006-01-13 Modified: 2026-06-16

Description

Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.

Affected Platforms

Php Php

Weakness Type

CWE-94

References