CVE:CVE-2008-0202
CNNVD:CNNVD-200801-137
ExpressionEngine 1.2.1以及更早版本下的index.php中存在CRLF注入漏洞。远程攻击者借助URL参数注入任意的HTTP页眉和执行HTTP响应分裂攻击(response splitting attack)。
solution:Upgrade expressionengine expressionengine to a higher version than 1.2.1,and avoid the version (,1.2.1]