CVE:CVE-2004-1516
CNNVD:CNNVD-200412-342
phpWebSite 0.9.3-4版本的index.phpCRLF存在注入漏洞。远程攻击者可以借助用户模块的block_username参数执行HTTP响应拆分攻击修改服务器预定HTML内容。
solution:Upgrade phpwebsite phpwebsite to a higher version than 0.7.3,0.8.2,0.8.3,0.9.3,0.9.3.1,0.9.3.2,0.9.3.3,0.9.3.4,and avoid the version 0.7.3,0.8.2,0.8.3,0.9.3,0.9.3.1,0.9.3.2,0.9.3.3,0.9.3.4