Security Advisory
CVE-2008-0202
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.