← Database

CVE-2008-2497

MEDIUM CVSS: 5.0 Published: 2008-05-28 Modified: 2026-06-16

Description

CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected Platforms

Mambo-Foundation Mambo

Weakness Type

CWE-94

References