CVE:CVE-2013-2652
CNNVD:CNNVD-201310-547
WebCollab是一套基于Web的项目管理系统。该系统支持对单个用户设置权限，并可对项目的进展情况用图形突出标记。
WebCollab 3.30及之前的版本中的help/help_language.php脚本中存在CRLF注入漏洞。远程攻击者可借助‘item’参数利用该漏洞插入任意HTTP头，并实施HTTP响应拆分攻击。
solution:Upgrade andrew_simpson webcollab to a higher version than 3.30,1.3:beta,1.30,1.31,1.32,1.40,1.41,1.42,1.50,1.51,1.60,1.60a,1.61,1.62,1.62a,1.70,1.71,1.71a,1.80,1.81,2.00,2.01,2.10,2.11,2.20,2.30,2.31,2.40,2.50,2.60,2.61,2.70,2.71,3.00,3.10,3.20,3.21,and avoid the version (,3.30],1.3:beta,1.30,1.31,1.32,1.40,1.41,1.42,1.50,1.51,1.60,1.60a,1.61,1.62,1.62a,1.70,1.71,1.71a,1.80,1.81,2.00,2.01,2.10,2.11,2.20,2.30,2.31,2.40,2.50,2.60,2.61,2.70,2.71,3.00,3.10,3.20,3.21