CVE-2004-2512

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.

Affected (12)

Products: Codeworx Technologies: Dcp Portal

Codeworx Technologies

1 product

Dcp Portal

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Codeworx Technologies Dcp Portal	Up to 5.3.2
Codeworx Technologies Dcp Portal	Version 3.7
Codeworx Technologies Dcp Portal	Version 4.0
Codeworx Technologies Dcp Portal	Version 4.1
Codeworx Technologies Dcp Portal	Version 4.2
Codeworx Technologies Dcp Portal	Version 4.5.1
Codeworx Technologies Dcp Portal	Version 5.0.1
Codeworx Technologies Dcp Portal	Version 5.0.2
Codeworx Technologies Dcp Portal	Version 5.1
Codeworx Technologies Dcp Portal	Version 5.2
Codeworx Technologies Dcp Portal	Version 5.3.1
Codeworx Technologies Dcp Portal	Version 5.3