CVE-2002-1783
medium · 5CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.
5
CVSS
16.7%
EPSS (exploit prob.)
97th
EPSS percentile
2002-12-31
Published
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| php | php | 3.0.14 |
| php | php | 3.0.15 |
| php | php | 3.0.16 |
| php | php | 3.0.17 |
| php | php | 3.0.18 |
| php | php | 4.0.3 |
| php | php | 4.0.4 |
| php | php | 4.0.5 |
| php | php | 4.0.6 |
| php | php | 4.0.7 |
| php | php | 4.1.0 |
| php | php | 4.1.1 |
| php | php | 4.1.2 |
| php | php | 4.2.0 |
| php | php | 4.2.1 |
| php | php | 4.2.2 |
| php | php | 4.2.3 |
Check a specific version with /api/v1/cve/match.
References
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0086.html
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0132.html
- http://www.debian.org/security/2002/dsa-168
- http://www.securityfocus.com/bid/5681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10080
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0086.html
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0132.html
- http://www.debian.org/security/2002/dsa-168
- http://www.securityfocus.com/bid/5681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10080
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2002-1783