CVE-2013-2652

Published: Nov 2, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter.

Affected (37)

Products: Andrew Simpson: Webcollab

Andrew Simpson

1 product

Webcollab

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Andrew Simpson Webcollab	Up to 3.30
Andrew Simpson Webcollab	Version 1.30
Andrew Simpson Webcollab	Version 1.31
Andrew Simpson Webcollab	Version 1.32
Andrew Simpson Webcollab	Version 1.3 beta
Andrew Simpson Webcollab	Version 1.40
Andrew Simpson Webcollab	Version 1.41
Andrew Simpson Webcollab	Version 1.42
Andrew Simpson Webcollab	Version 1.50
Andrew Simpson Webcollab	Version 1.51
Andrew Simpson Webcollab	Version 1.60
Andrew Simpson Webcollab	Version 1.60a
Andrew Simpson Webcollab	Version 1.61
Andrew Simpson Webcollab	Version 1.62
Andrew Simpson Webcollab	Version 1.62a
Andrew Simpson Webcollab	Version 1.70
Andrew Simpson Webcollab	Version 1.71
Andrew Simpson Webcollab	Version 1.71a
Andrew Simpson Webcollab	Version 1.80
Andrew Simpson Webcollab	Version 1.81
Andrew Simpson Webcollab	Version 2.00
Andrew Simpson Webcollab	Version 2.01
Andrew Simpson Webcollab	Version 2.10
Andrew Simpson Webcollab	Version 2.11
Andrew Simpson Webcollab	Version 2.20
Andrew Simpson Webcollab	Version 2.30
Andrew Simpson Webcollab	Version 2.31
Andrew Simpson Webcollab	Version 2.40
Andrew Simpson Webcollab	Version 2.50
Andrew Simpson Webcollab	Version 2.60
Andrew Simpson Webcollab	Version 2.61
Andrew Simpson Webcollab	Version 2.70
Andrew Simpson Webcollab	Version 2.71
Andrew Simpson Webcollab	Version 3.00
Andrew Simpson Webcollab	Version 3.10
Andrew Simpson Webcollab	Version 3.20
Andrew Simpson Webcollab	Version 3.21