CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.09876
Percentile: 0.9264

CVSS Scoring

Affected Products

• cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*
• cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*

← Back to Home