CVE:CVE-2011-4545
CNNVD:CNNVD-201112-252
Prestashop 1.4.4.1版本中的admin/displayImage.php存在CRLF注入漏洞。远程攻击者可借助name参数注入任意HTTP头和执行HTTP响应拆分攻击。
solution:Upgrade prestashop prestashop to a higher version than 1.4.4.1,and avoid the version 1.4.4.1