Chain: caching proxy server has improper input validation (CWE-20) of headers, allowing HTTP response smuggling (CWE-444) using an "LF line ending"
CVE-2008-5305
Eval injection in Perl program using an ID that should only contain hyphens and numbers.
CVE-2008-2223