EDB-32303

functional

Mono 2.0 - 'System.Web' HTTP Header Injection

view exploit source exploit_dbverifiedtype remoteauthor Juraj Skripskypublished 2008-08-20catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2008-3906US	medium4.3	7.10% (94th)	Exploit	2008-09-04
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequen…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.