GHSA-xrpq-63mp-9vcwHigh

phpMyAdmin HTTP Response Splitting Vulnerability

Published
May 2, 2022
Last Modified
January 23, 2024

🔗 CVE IDs covered (1)

CVE-2009-1149 →

📋 Description

CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.

🎯 Affected products1

  • composer/phpmyadmin/phpmyadmin:< 3.1.3.1

🔗 References (6)