CVE-2005-3982

Published: Dec 4, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.

Affected (1)

Products: Webcalendar: Webcalendar

Webcalendar

1 product

Webcalendar

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webcalendar Webcalendar	Version 1.0.1

References (16)

http://secunia.com/advisories/17848

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19240

Source: cve@mitre.org

PatchVendor Advisory

http://vd.lwang.org/webcalendar_multiple_vulns.txt

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1002

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/21383

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/418286/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15673

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2702

Source: cve@mitre.org

http://secunia.com/advisories/17848