← Database

CVE-2009-1149

HIGH CVSS: 7.5 Published: 2009-03-26 Modified: 2026-06-16

Description

CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.

Affected Platforms

Phpmyadmin Phpmyadmin

Weakness Type

CWE-20

References