CVE-2012-2943 Information

Description

CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.

Reference

http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html http://www.securityfocus.com/bid/53609 https://exchange.xforce.ibmcloud.com/vulnerabilities/75768