Security Advisory
CVE-2008-2497
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.