Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1398.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP 输入验证错误
Vulnerability Description
PHP是一种在服务器端执行的脚本语言。 PHP 5.4.0RC2至5.4.0版本存在输入验证错误漏洞，该漏洞源于检验%0D序列（又名回车符）期间未正确确认执行。远程攻击者可利用该漏洞通过与PHP头函数和某些浏览之间未正确交互相关的特制URL，如IE和谷歌浏览器，绕过HTTP响应拆分保护机制。
CVSS Information
N/A
Vulnerability Type
N/A